diff --git a/doc/tor-doc.html b/doc/tor-doc.html
index 7a52dcf47e..d17759a66d 100644
--- a/doc/tor-doc.html
+++ b/doc/tor-doc.html
@@ -222,11 +222,38 @@ service url).
that have at least 1Mbit each way. Currently we don't use all of that,
but we want it available for burst traffic.
-To set up a Tor server, do the following steps. Some steps are optional
-but recommended.
+To set up a Tor server, do the following steps after installing Tor.
+(These instructions are Unix-centric; let us know if you get it working
+on Windows.)
+
-- (Optional) 1. Make a separate user to run the server. If you
+
- 1. Copy torrc.sample to torrc (in the default configuration this
+means copy /usr/local/etc/tor/torrc.sample to /usr/local/etc/tor/torrc),
+and edit the bottom part. Create the DataDirectory, and make sure it's
+owned by the uid/gid that will be running tor. Fix your system clock so
+it's not too far off. Make sure name resolution works.
+
+
- 2. Run tor to generate keys and then exit: tor
+--list-fingerprint. Send mail to tor-ops@freehaven.net including
+a) this key fingerprint, b) who you are, so we know whom to contact if
+there's any problem, and c) what kind of connectivity the new server
+will have. If possible, PGP sign your mail.
+
- 3. If you are using a firewall, open a hole in your firewall so
+incoming connections can reach the ports you configured (i.e. ORPort,
+plus DirPort if you enabled it). Make sure outgoing connections can reach
+at least ports 80, 443, and 9001-9033 (to get to other onion routers),
+plus any other addresses or ports your exit policy allows.
+
- 4. Start your server: tor. If it logs any warnings,
+address them.
+
+
+Optionally, we recommend the following steps as well:
+
+
+- 1. Make a separate user to run the server. If you
installed the deb or the rpm, this is already done. Otherwise,
you can do it by hand. (The Tor server doesn't need to be run as
root, so it's good practice to not run it as root. Running as a
@@ -234,39 +261,20 @@ root, so it's good practice to not run it as root. Running as a
detect user name. If you're the paranoid sort, feel free to put Tor
into a chroot jail.)
-
- 2. Copy torrc.sample to torrc (in the default configuration this
-means copy /usr/local/etc/tor/torrc.sample to /usr/local/etc/tor/torrc),
-and edit the bottom part. Create the DataDirectory, and make sure it's
-owned by the uid/gid that will be running tor. Fix your system clock so
-it's not too far off. Make sure name resolution works. Make sure each
-process can get to 1024 file descriptors (this should be already done
-for everybody but some BSD folks).
-
- 3. Decide what exit policy you want. By default your server allows
+
- 2. Decide what exit policy you want. By default your server allows
access to many popular services, but we restrict some (such as port 25)
due to abuse potential. You might want an exit policy that is either
less restrictive or more restrictive; edit your torrc appropriately.
If you choose a particularly open exit policy, you might want to make
sure your upstream or ISP is ok with that choice.
-
- 4. Run tor to generate keys and then exit: tor
---list-fingerprint. Send mail to tor-ops@freehaven.net including
-a) this key fingerprint, b) who you are, so we know whom to contact if
-there's any problem, and c) what kind of connectivity the new server
-will have. If possible, PGP sign your mail.
-
- 5. If you are using a firewall, open a hole in your firewall so
-incoming connections can reach the ports you configured (i.e. ORPort,
-plus DirPort if you enabled it). Make sure outgoing connections can reach
-at least ports 80, 443, and 9001-9033 (to get to other onion routers),
-plus any other addresses or ports your exit policy allows.
-
- 6. Start your server: tor. If it logs any warnings,
-address them.
-
- (Optional) 7. You may find the initscripts in contrib/tor.sh or
+
- 3. You may find the initscripts in contrib/tor.sh or
contrib/torctl useful if you want to set up Tor to start at boot. Let
us know which script you find more useful.
-
- (Optional) 8. Consider setting your hostname to 'anonymous' or
+
- 4. Consider setting your hostname to 'anonymous' or
'proxy' or 'tor-proxy' if you can, so when other people see the address
in their web logs or whatever, they will more quickly understand what's
going on.
-
- (Optional) 9. If you're not running anything else on port 80 or port
+
- 5. If you're not running anything else on port 80 or port
443, please consider setting up port-forwarding and advertising these
low-numbered ports as your Tor server. This will help allow users behind
particularly restrictive firewalls to access the Tor network. See section