Index: tcp_input.c =================================================================== RCS file: /usr/repo/src/sys/netinet/tcp_input.c,v retrieving revision 1.367 diff -u -p -r1.367 tcp_input.c --- tcp_input.c 30 Jul 2007 11:06:41 -0000 1.367 +++ tcp_input.c 28 Aug 2007 20:43:47 -0000 @@ -452,11 +452,13 @@ findpcb: #ifdef INET6 if (isipv6 && inp != NULL && ipsec6_in_reject(m, inp)) { ipsec6stat.in_polvio++; + inp = NULL; goto dropunlock; } else #endif /* INET6 */ if (inp != NULL && ipsec4_in_reject(m, inp)) { ipsec4stat.in_polvio++; + inp = NULL; goto dropunlock; } #endif /* IPSEC */