diff --git a/include/net/xfrm.h b/include/net/xfrm.h
index 9a8c94f9bd74..5ef446431358 100644
--- a/include/net/xfrm.h
+++ b/include/net/xfrm.h
@@ -1170,7 +1170,7 @@ static inline int xfrm_route_forward(struct sk_buff *skb, unsigned short family)
 {
 	struct net *net = dev_net(skb->dev);
 
-	if (xfrm_default_allow(net, XFRM_POLICY_OUT))
+	if (xfrm_default_allow(net, XFRM_POLICY_FWD))
 		return !net->xfrm.policy_count[XFRM_POLICY_OUT] ||
 			(skb_dst(skb)->flags & DST_NOXFRM) ||
 			__xfrm_route_forward(skb, family);