See the file man5/shorewall-nat.5.