clean up the configuring-your-relay docs. make it clearer that you have to consider an exit policy.
Roger Dingledine

Roger Dingledine commited on 2009-06-24 07:21:10
Zeige 2 geänderte Dateien mit 30 Einfügungen und 35 Löschungen.

... ...
@@ -73,45 +73,48 @@ while to make sure it's actually working.</p>
73 73
 <h2><a class="anchor" href="#setup">Step Two: Set it up as a relay</a></h2>
74 74
 <br />
75 75
 <ol>
76
-<li>Verify that your clock is set correctly. If possible, synchronize
77
-your clock with public <a href="http://en.wikipedia.org/wiki/Network_Time_Protocol">time servers</a>.
76
+<li>Verify that your clock and timezone are set
77
+correctly. If possible, synchronize your clock with public <a
78
+href="http://en.wikipedia.org/wiki/Network_Time_Protocol">time
79
+servers</a>.
78 80
 </li>
79 81
 
80
-<li>Make sure name resolution works (that is, your computer can resolve
81
-Internet addresses correctly).
82
-</li>
83
-<li>The easier step to configure a relay is to use Vidalia.  The more advanced step is to edit your torrc directly.
84
-
85
-<br />
86
-<strong>Easy Configuration</strong>:
82
+<li> <strong>Windows / OS X Configuration</strong>:
87 83
 <ol>
88 84
 <li>Right click on the Vidalia icon in your task bar.  Choose <tt>Control Panel</tt>.</li>
89 85
 <li>Click <tt>Setup Relaying</tt>.</li>
90
-<li>Choose <tt>Relay Traffic for the Tor network</tt>.</li>
86
+<li>Choose <tt>Relay Traffic for the Tor network</tt> if you want to be
87
+a public relay (recommended), or choose <tt>Help censored users reach the
88
+Tor network</tt> if you want to be a <a href="<page bridges>">bridge</a>
89
+for users in countries that censor their Internet.</li>
91 90
 <li>Enter a nickname for your relay. (Optional, enter contact information.)</li>
92
-<li>Choose <tt>Attempt to automatically configure port forwarding</tt>.
91
+<li>Leave <tt>Attempt to automatically configure port forwarding</tt> clicked.
93 92
 Push the <tt>Test</tt> button to see if it works.  If it does work, great.
94 93
 If not, see number 4 below.</li>
95 94
 <li>Choose the <tt>Bandwidth Limits</tt> tab.  Select how much bandwidth you want to provide for Tor users like yourself.</li>
96 95
 <li>Choose the <tt>Exit Policies</tt> tab.  If you want to allow others
97 96
 to use your relay for these services, don't change anything.  Un-check
98
-the services you don't want to allow through your relay.  If you want to
99
-be a non-exit relay, un-check all services.</li>
97
+the services you don't want to allow people to <a href="<page
98
+faq>#RunARelayBut">reach from your relay</a>.
99
+If you want to be a non-exit relay, un-check all services.</li>
100 100
 <li>Click the <tt>Ok</tt> button.  See Step Three below for confirmation
101 101
 that the relay is working correctly.</li>
102 102
 </ol>
103 103
 
104 104
 <br />
105
-<strong>Advanced Configuration</strong>:
105
+<strong>Linux / BSD Configuration</strong>:
106 106
 <ul>
107
-<li>Edit the bottom part of your torrc. (See <a
108
-href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#torrc">this
109
-FAQ entry</a> for help.)
110
-Make sure to define at least Nickname and ORPort. Create the DataDirectory
111
-if necessary, and make sure it's owned by the user that will be running
112
-tor. <em>If you want to run more than one relay that's great, but
113
-please set <a href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#MultipleRelays">the
114
-MyFamily option</a> in all your relays' configuration files.</em></li>
107
+<li>Edit the bottom part of <a
108
+href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#torrc">your
109
+torrc file</a>. Make sure to define ORPort and <a href="<page
110
+faq>#RunARelayBut">look at ExitPolicy</a>
111
+if you want to be a public relay (recommended), or just add
112
+<a href="<page bridges>#RunningABridge">these lines</a>
113
+if you want to be a <a href="<page bridges>">bridge</a>
114
+for users in countries that censor their Internet.
115
+<!-- If you installed from source, create the DataDirectory if necessary
116
+and make sure it's owned by the user that will be running tor. -->
117
+</li>
115 118
 
116 119
 </ul></li>
117 120
 
... ...
@@ -185,19 +188,9 @@ to get ideas how you can increase the security of your relay.
185 188
 </p>
186 189
 
187 190
 <p>
188
-9. Decide what exit policy you want. By default your relay allows
189
-access to many popular services, but restricts some (such as port 25)
190
-due to abuse potential. You might want an exit policy that is
191
-less restrictive or more restrictive; edit your torrc appropriately.
192
-Read the FAQ entry on <a
193
-href="<page faq-abuse>#TypicalAbuses">issues you might
194
-encounter if you use the default exit policy</a>.
195
-If you choose a particularly open exit policy, you should make
196
-sure your ISP is ok with that choice.
197
-If there are any resources that your computer can't reach (for example,
198
-you are behind a restrictive firewall or content filter), please
199
-explicitly reject them in your exit policy &mdash; otherwise Tor users
200
-will be impacted too.
191
+9. If you want to run more than one relay that's great, but please set <a
192
+href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#MultipleRelays">the
193
+MyFamily option</a> in all your relays' configuration files.
201 194
 </p>
202 195
 
203 196
 <p>
... ...
@@ -786,6 +786,8 @@ external websites or other services.
786 786
 </p>
787 787
 
788 788
 <p>
789
+Make sure name resolution works (that is, your computer can resolve
790
+Internet addresses correctly).
789 791
 If there are any resources that your computer can't reach (for example,
790 792
 you are behind a restrictive firewall or content filter), please
791 793
 explicitly reject them in your exit policy &mdash; otherwise Tor users
792 794