See the file man5/shorewall-hosts.5.