iptables -t nat -A PREROUTING -s 192.168.11.0/255.255.255.0 -p tcp --dport 80 -j REDIRECT --to-port 80
iptables -t nat -A PREROUTING -s 192.168.11.0/255.255.255.0 -p tcp --dport 443 -j REDIRECT --to-port 80


iptables -A FORWARD -s 192.168.11.0/255.255.255.0 -j REJECT