my point is: set it to No temporarily, do tests again to see if the "weird" issue will be gone.
your question looks clear to me now. actually already answered in previous replies, in above #4 / #6 reply.
in short, in your case:
attacking IPs --> proxy --> lsws server
for this set up, lsws...