See the file man5/shorewall-tcclasses.5.