currently, ACLs do not take into account relayed traffic. If you have access to the relay, then the traffic will flow essentially. The only way to avoid that is to deny access to the relay right now.