How about adding includes/excludes patterns to virtual repositories as well ?
In our case, I sometimes see Maven checking for updates of com.clearforest.* artifacts in public repositories. But instead of going to each public repository proxied - I'd just exclude "com/clearforest/**" from "remote-repos" virtual repository.