---
title: SourceRouting enum | Wartiva GraphQL API
description: MSS policy: "MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)".
url: https://wartiva.com/api-docs/types/source-routing.html
updated: 2026-10-07
---

Endpoint configuration · GraphQL enum

# `SourceRouting` enum

MSS policy: "MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)". Controls whether the TCP/IP stack processes source-routed IPv4 packets, which attackers can use to obscure their identity or route packets through unintended paths. Registry: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters:DisableIPSourceRouting (REG_DWORD). CIS Benchmark (L1) and DISA STIG recommend value 2 (highest protection). Reference: [Policy CSP - MSSLegacy (IPv4SourceRoutingProtectionLevel)](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-msslegacy#ipv4sourceroutingprotectionlevel)

## Values

| Enum Value | Description |
|---|---|
| `ENABLED_NO_ADDITIONAL_PROTECTION` | Enabled: no additional protection (registry value 0). Source-routed packets are forwarded as normal. No protection against packet spoofing via source routing. |
| `ENABLED_SOURCE_ROUTING_PACKETS_IGNORED_WHEN_IP_FORWARDING_IS_ENABLED` | Enabled: source-routed packets ignored when IP forwarding is enabled (registry value 1). Partial protection — source routing packets are dropped only when IP forwarding is active. |
| `ENABLED_HIGHEST_SOURCE_ROUTING_COMPLETELY_DISABLED` | Enabled: highest protection — source routing completely disabled (registry value 2). All incoming source-routed packets are dropped regardless of IP forwarding state. Recommended by CIS and DISA STIG. |
| `DISABLED` | Source routing protection is disabled by policy (policy not configured). |

## Used by

- [`ComputerAdministrativeTemplates`](https://wartiva.com/api-docs/types/computer-administrative-templates.html) type: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.

## Example

### Example

```json
"ENABLED_NO_ADDITIONAL_PROTECTION"

```

---

Wartiva is in early access. Request access: https://wartiva.com/early-access.html  
All pages: https://wartiva.com/llms.txt