ipsec4_in_reject
if (ipsec4_in_reject(m, NULL) != 0) {
.check_policy = ipsec4_in_reject,
int ipsec4_in_reject(const struct mbuf *, struct inpcb *);