ubuntu server - openvpn bridged问题

sherman

https://help.ubuntu.com/community/OpenVPN

严格按照这个加了up.sh, down.sh和配好server.conf

为什么log报这样的错？

sherman@owl:/etc/openvpn$ /etc/init.d/openvpn restart
* Stopping virtual private network daemon(s)...                                                                                                     
*   No VPN is running.
* Starting virtual private network daemon(s)...                                                                                                      
*   Autostarting VPN 'server'                                                                                                                       


sherman@owl:/etc/openvpn$ cat openvpn.log
Fri Mar 29 13:13:45 2013 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 30 2012
Fri Mar 29 13:13:45 2013 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Fri Mar 29 13:13:45 2013 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Fri Mar 29 13:13:45 2013 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Fri Mar 29 13:13:45 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Mar 29 13:13:45 2013 Diffie-Hellman initialized with 1024 bit key
Fri Mar 29 13:13:45 2013 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Mar 29 13:13:45 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Fri Mar 29 13:13:45 2013 TUN/TAP device tap0 opened
Fri Mar 29 13:13:45 2013 TUN/TAP TX queue length set to 100
Fri Mar 29 13:13:45 2013 /etc/openvpn/up.sh br0 tap0 1500 tap0 1500 1574   init
Fri Mar 29 13:13:45 2013 WARNING: External program may not be called unless '--script-security 2' or higher is enabled.  Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier.  See --help text or man page for detailed info.
Fri Mar 29 13:13:45 2013 WARNING: Failed running command (--up/--down): external program fork failed
Fri Mar 29 13:13:45 2013 Exiting