See the file man5/shorewall-ipsets.5.