Unfortunately, it is the way it works. client IP are received through x-forwarded-for request header.
LSWS cannot block proxy IP, so all requests forwarded from proxy server has to be accepted. unless there is a way to notify the proxy server to block those IPs at proxy server, no way to block...