how to limit my web-proxy for only internet use

I configured the web-proxy it’s very good the problem is
if i’m out of my LAN but connected to the internet i can use my internet connection if i set my public ip as the proxy and the port I Set… so :frowning: PPL can use my proxy server for anonyme surfing

1 - so i want to Stop the use of the web-proxy and restrict it only for my LAN
2 - also i want to stop the use of the internet in my LAN without proxy

i resolved first prob by adding this rule under ip web-proxy access>

11 src-address=10.20.30.0/24 action=allow \ 10.20.30.0 is my LAN

12 action=deny

You can resolve the second problem by adding a NAT rule in IP/Firewall/nat

/ip firewall nat
add chain=dstnat action=redirect to-ports=3128 in-interface=lan dst-port=80
protocol=tcp comment=“Tranparent Proxy” disabled=no

where “3128” is your proxy port and “lan” is your local interface

Thanks skillful .