ipsec_in_to_out_action
reflect_action = ipsec_in_to_out_action(ira);
extern ipsec_action_t *ipsec_in_to_out_action(ip_recv_attr_t *);