ipsec_check_policy
if (!ipsec_check_policy(iph, pol, dir))
extern boolean_t ipsec_check_policy(ipsec_policy_head_t *, ipsec_policy_t *,