CCR routerOS webproxy rules arent followed

Hi i’ve recently noticed a spam ISP accessing my webproxy even though i have set only a specific range of IP addresses that can access it and denying the rest under web proxy rules.

I had to add firewall rules just to deny outside IPs from accessing it instead but not before it filled up the cache. Now i cant even empty the cache and the amount of traffic consumed just by it even though the packets are being dropped is chewing up a significant amount of my download speed. I allocated some ram as cache only for very small files.

Is it more efficient to use the IP firewall to filter the web proxy or the web proxy rules? So far the web proxy rules dont seem to be followed since i still see connections without any users without the firewall denying outside access.