Set the proper direction to check for policies in this one case.

Pointed out by: eri
Sponsored by:	Rubicon Communications (Netgate)

diff --git a/sys/netinet/ip_ipsec.c b/sys/netinet/ip_ipsec.c
index 77ce4c1a79ad979ca32bf43cf00e331b1cc26fca..ac1e3d56d73ce2acc8d3bb8f03210e389c86c771 100644 (file)
--- a/sys/netinet/ip_ipsec.c
+++ b/sys/netinet/ip_ipsec.c
@@ -159,7 +159,7 @@ ip_ipsec_output(struct mbuf **m, struct inpcb *inp, int *error)
 {
        struct secpolicy *sp;
 
-       if (!key_havesp(IPSEC_DIR_INBOUND))
+       if (!key_havesp(IPSEC_DIR_OUTBOUND))
                return 0;
 
        /*