Chain INPUT (policy DROP)
target     prot opt source               destination
level2     all  --  192.168.11.138       anywhere
level2     all  --  192.168.11.197       anywhere
level3     all  --  192.168.11.222       anywhere
level3     all  --  192.168.11.1         anywhere
level3     all  --  192.168.11.129       anywhere
ACCEPT     all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
level2     all  --  192.168.11.138       anywhere
level2     all  --  192.168.11.197       anywhere
level3     all  --  192.168.11.222       anywhere
level3     all  --  192.168.11.1         anywhere
level3     all  --  192.168.11.138       anywhere
level3     all  --  192.168.11.197       anywhere
level3     all  --  192.168.11.129       anywhere
ACCEPT     all  --  anywhere             anywhere

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain level0 (0 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain level1 (0 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain level2 (4 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            limit: avg 50/sec burst 5
DROP       all  --  anywhere             anywhere

Chain level3 (8 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            limit: avg 151/sec burst 5
DROP       all  --  anywhere             anywhere
[root@r97 sjelinek]#

Note: This one only shows the 11.X subnet since this router is only
handling the 11.X machines.