See the file man5/shorewall-tcpri.5.