The Nexus3 routing feature will allow you to block a package from an upstream repo, but the blocked package will be included in the group metadata because it was merged from upstream repo metadata. This means if the blocked package of the proxy repo has a higher version than an internal, similarly named repo, Nexus will still suggest the blocked package, but simply not allow it to be downloaded.
How can I exclude the blocked package from the group metadata?