See the file man5/shorewall-tunnels.5.