diff --git a/sys/netinet/ip_fw2.c b/sys/netinet/ip_fw2.c
index 4d540149c5a..ed5946e330b 100644
--- a/sys/netinet/ip_fw2.c
+++ b/sys/netinet/ip_fw2.c
@@ -1898,7 +1898,7 @@ check_body:
 				    PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL);
 #endif
 #ifdef IPSEC
-				match = (ipsec_gethist(m, NULL) != NULL);
+				match = (ipsec_getnhist(m) != NULL);
 #endif
 				/* otherwise no match */
 				break;