The text f0d81573ae8f, as Debian 11 (Bullseye) shipped it.
Shorewall file
shorewall6-secmarks(5) on Linux now