iptables -N drop-and-log-it
iptables -A drop-and-log-it -j LOG --log-prefix iptables --log-level info
iptables -A drop-and-log-it -j REJECT

iptables -A FORWARD -s 192.168.11.0/255.255.255.0 -j drop-and-log-it