.--------------. 	 
      | non-existant |
      |    policy    |
      `--------------'
             |        
             | PF_ACQUIRE
             |           
             |<---------.
             V          | new packet
      .--------------.  | (maybe resend PF_ACQUIRE)
      |  hold policy |--'                          
      |              |--.                          
      `--------------'   \  pass                   
         |        |       \ msg    .---------.     
         |        |        \       V         | forward
         |        |         .-------------.  | packet 
  create |        |         | pass policy |--'       
  IPsec  |        |         `-------------'          
  SA     |        |                                  
         |         \                                 
         |          \                                
         V           \ 	deny                         
   .---------.        \ msg                          
   | encrypt |         \                             
   | policy  |          \         ,---------.        
   `---------'           \        |         | discard
                          \       V         | packet 
                           .-------------.  |        
                           | deny policy |--'        
                           '-------------'          
                                                   
    
$Id: forwardingstate.txt,v 1.2 2003/06/30 01:45:55 mcr Exp $