See the file man5/shorewall-masq.5.