See the file man5/shorewall-policy.5.