See the file man5/shorewall-tcrules.5.