See the file man5/shorewall-tcdevices.5.