====== Firewall and access rights ======

===== Shared folders=====

The Pcc main directory must be shared on the server. Please note that the access rights are set up for each Pcc user. All Pcc users, including the local system accounts, will need full rights (read, write, change, delete).

{{:en:sonstigefunktion:technik:firewall:freigabe.png|}}


===== Windows permissions =====

All Pcc Windows users must have the right to read, write, change, and delete files in the Pcc folder and in all its sub directories.

{{:en:sonstigefunktion:technik:firewall:sicherheit.png?|}}

If necessary, it is possible to start Pcc under a different Windows user with appropriate privileges.

Specific functions require that Pcc creates new folders in the data directory. It must be ensured that this is included in the user rights.

===== Firewall settings, routing =====
 
The following ports must be enabled for trouble-free Pcc operation:

==== Public, Internet (only outgoing!) =====

These ports must be opened only for **//outgoing//** activities! Naturally, these ports must **not** be accessible from the internet.

^ TCP 5500  | VNC (Remote maintenance Pcc Support)  |
^ TCP 80 (HTTP), 443 (HTTPS), 23 (FTP)  | Intranet/Pcc Updates: www.pccaddie.com  |

  * The following domains are systematically accessed: 
    * www.pccaddie.com
    * update.pccaddie.com
    * www.pccaddie.net
    * %%sms.pccaddie.net%%
    * %%gateway.pccaddie.net%%

    * www.startzeitenserver.de
    * iis.dgv-intranet.de
    * www.dgv-intranet.de
    * nominatim.openstreetmap.org

  * In Switzerland, the following domains are needed instead of dgv-intranet.de::
    * iis.asg-intranet.ch
    * www.asg-intranet.ch
    * www.golfsuisse.ch

  * In addition, for connecting to the Swiss Golf Network:
    * www.swissgolfnetwork.ch
    * t-time.swissgolfnetwork.ch


:!: Please note that these ports need to be enabled when using a proxy server.

==== Local, within the corporate network ====

=== From workstations to PC CADDIE database server ===

^ UDP 6262  | ADS [[en:sonstigefunktion:advantagedatabaseserver]]  |

=== From PC CADDIE card system server to the automated units ===

online ball machines, doors, vending machines, barriers, caddy boxes, etc.:

^ TCP 950, 951, 966, 967  | necessary for operation  |
^ TCP 23, 80              | for configuration and error diagnostics  |

:!: Please consider the correct routing in case you are working with multiple subnets.