The text c9ed063eaa9f, as Debian 6.0 (Squeeze) shipped it.
Shorewall one-to-one NAT file
shorewall-nat(5) on Linux now