See the file man5/shorewall-snat.5.