See the file man5/shorewall-tcinterfaces.5.