From: gnn <gnn@FreeBSD.org>
Date: Thu, 29 Oct 2015 21:26:32 +0000 (+0000)
Subject: Set the proper direction to check for policies in this one case.
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=a09f127051e41048f0b1ec243981d1b8c7981716;p=people%2Fjulieng%2Ffreebsd.git

Set the proper direction to check for policies in this one case.

Pointed out by: eri
Sponsored by:	Rubicon Communications (Netgate)
---

diff --git a/sys/netinet/ip_ipsec.c b/sys/netinet/ip_ipsec.c
index 77ce4c1a79ad..ac1e3d56d73c 100644
--- a/sys/netinet/ip_ipsec.c
+++ b/sys/netinet/ip_ipsec.c
@@ -159,7 +159,7 @@ ip_ipsec_output(struct mbuf **m, struct inpcb *inp, int *error)
 {
 	struct secpolicy *sp;
 
-	if (!key_havesp(IPSEC_DIR_INBOUND))
+	if (!key_havesp(IPSEC_DIR_OUTBOUND))
 		return 0;
 
 	/*