diff --git a/extensions/pknock/xt_pknock.c b/extensions/pknock/xt_pknock.c
index 830603e..95afef9 100644
--- a/extensions/pknock/xt_pknock.c
+++ b/extensions/pknock/xt_pknock.c
@@ -846,12 +846,12 @@ pass_security(struct peer *peer, const struct xt_pknock_mtinfo *info,
 		return false;
 	}
 	/* Check for OPEN secret */
-	if (!has_secret(info->open_secret,
+	if (has_secret(info->open_secret,
 					info->open_secret_len, peer->ip,
 					payload, payload_len))
-		return false;
+		return true;
 
-	return true;
+	return false;
 }
 #endif /* PK_CRYPTO */