diff --git a/sys/netinet/ip_ipsec.c b/sys/netinet/ip_ipsec.c
index 77ce4c1a79ad..ac1e3d56d73c 100644
--- a/sys/netinet/ip_ipsec.c
+++ b/sys/netinet/ip_ipsec.c
@@ -159,7 +159,7 @@ ip_ipsec_output(struct mbuf **m, struct inpcb *inp, int *error)
 {
 	struct secpolicy *sp;
 
-	if (!key_havesp(IPSEC_DIR_INBOUND))
+	if (!key_havesp(IPSEC_DIR_OUTBOUND))
 		return 0;
 
 	/*