See the file man5/shorewall.conf.5.