The text a6ce381eb9df, as Debian 9 (Stretch) shipped it.
Shorewall ECN file
shorewall-ecn(5) on Linux now