See the file man5/shorewall-params.5.