--- zzzz-none-000/linux-2.6.28.10/include/net/xfrm.h	2009-05-02 18:54:43.000000000 +0000
+++ fusiv-7390-686/linux-2.6.28.10/include/net/xfrm.h	2012-02-14 14:37:49.000000000 +0000
@@ -994,6 +994,10 @@
 
 static inline int xfrm4_policy_check(struct sock *sk, int dir, struct sk_buff *skb)
 {
+#ifdef CONFIG_IPSEC_AP_SUPPORT
+            if((skb->apFlowData.flags1 & (1 << AP_FLAG1_IS_IPSEC_DECRYPTED_BIT )))
+                return 1;
+#endif
 	return xfrm_policy_check(sk, dir, skb, AF_INET);
 }