IPSEC_DIR_OUTBOUND
pol->sadb_x_policy_dir == IPSEC_DIR_OUTBOUND)
(!pol->sadb_x_policy_dir || pol->sadb_x_policy_dir > IPSEC_DIR_OUTBOUND))