See the file man5/shorewall-stoppedrules.5.