See the file man5/shorewall-vardir.5.