See the file man5/shorewall-blrules.5.