See the file man5/shorewall-rtrules.5.