IPSEC_POLICY_DISCARD
pol->sadb_x_policy_type = IPSEC_POLICY_DISCARD;
xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?