--- ipsec.c.old	Thu Nov  2 14:54:29 2000
+++ ipsec.c	Mon Oct 23 14:24:34 2000
@@ -3141,6 +3141,8 @@
 
 	if (nxt != IPPROTO_IPV4)
 		return 0;
+        if (sav->sah->saidx.mode == IPSEC_MODE_TRANSPORT)                      
+                return 0;
 #ifdef _IP_VHL
 	hlen = _IP_VHL_HL(ip->ip_vhl) << 2;
 #else
@@ -3179,6 +3181,8 @@
 
 	if (nxt != IPPROTO_IPV6)
 		return 0;
+        if (sav->sah->saidx.mode == IPSEC_MODE_TRANSPORT)
+                return 0;
 	switch (((struct sockaddr *)&sav->sah->saidx.dst)->sa_family) {
 	case AF_INET6:
 		sin6 = ((struct sockaddr_in6 *)&sav->sah->saidx.dst);