Directory acl doesn't seem to block server access

we’re trying to use directory acl’s to block access to a directory where a 15gb database lives, i want to stop other servers from trying to replicate it from us as they’re supposed to be using the hub server (located in europe) for that

this is how it’s set

yet the log and replicatio history are showing access and replication

does anyone know if this is supposed to block servers as well or is there another way

these servers are still on r5 so tend to replicate everything - can’t use the do not replicate field

the acl can’t be changed as they need to replicate this database - just not from us