See the file man5/shorewall-tos.5.