# Engine Editor > Policies > Automatic Rules

Use this branch to view a summary of currently used Automatic rules and change general settings for Automatic rules.

Option | Definition
--- | ---
To Engine section (Engine/VPN role only)
Allow Traffic to Authentication Ports | When Yes is selected, allows traffic to the ports that are used for user authentication.
Allow Traffic from Listening IP Addresses to DNS Relay Port | When Yes is selected, allows traffic from clients in the internal network to the standard DNS ports (53/TCP and 53/UDP) on the interfaces that are selected as listening interfaces for DNS relay.
From Engine section (Engine/VPN role only)
Allow Connections to Domain-Specific DNS Servers | When Yes is selected, allows connections from the engine to the domain-specific DNS servers specified in the DNS Relay Profile element that is selected for engine.
Allow Connections from Local DHCP Relay to Remote DHCP Server | When Yes is selected, allows connections from interfaces on which DHCP relay is active to remote DHCP servers. Note: To relay DHCP messages through a policy-based VPN, you must add specific Access rules to allow the traffic. The Access rules must refer to the correct policy-based VPN.
Log Level for Automatic Rules | The log level for traffic that matches automatic rules. None — Does not create any log entry. Alert — Triggers an alert entry. Essential — Creates a log entry that is shown in the Logs view and saved for further use. Stored — Creates a log entry that is stored on the Log Server. Transient — Creates a log entry that is displayed in the Current Events mode in the Logs view (if someone is viewing it) but is not stored.
Alert | When the Log Level is set to Alert, specifies the Alert that is sent.
Reset to Default Settings | Returns Automatic Rule changes to the default settings.