See the file man5/shorewall-rules.5.