--- zzzz-none-000/linux-3.10.107/net/netfilter/xt_policy.c	2017-06-27 09:49:32.000000000 +0000
+++ vr9-7490-729/linux-3.10.107/net/netfilter/xt_policy.c	2021-11-10 11:53:56.000000000 +0000
@@ -6,6 +6,13 @@
  * it under the terms of the GNU General Public License version 2 as
  * published by the Free Software Foundation.
  */
+
+/**
+ * Some part of this file is modified by Ikanos Communications.
+ *
+ * Copyright (C) 2013-2014 Ikanos Communications.
+ */
+
 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
 #include <linux/kernel.h>
 #include <linux/module.h>
@@ -124,6 +131,13 @@
 		ret = info->flags & XT_POLICY_MATCH_NONE ? true : false;
 	else if (info->flags & XT_POLICY_MATCH_NONE)
 		ret = false;
+#ifdef CONFIG_IPSEC_AP_SUPPORT
+	if (info->flags & XT_POLICY_MATCH_IN)
+	{
+	    if((skb->apFlowData.flags1 & (1 << AP_FLAG1_IS_IPSEC_DECRYPTED_BIT )))
+	        ret = true;
+	}
+#endif
 
 	return ret;
 }