import { Steps } from 'nextra/components'; import { AccordionTemplate } from 'components/accordion-template.tsx'; import ExitPolicyTestOutput from 'components/operators/snippets/wg-exit-policy-test-output.mdx'; ###### 1. Make sure to have the latest NTM: ```sh curl -L https://raw.githubusercontent.com/nymtech/nym/refs/heads/develop/scripts/nym-node-setup/network-tunnel-manager.sh -o network-tunnel-manager.sh && \ chmod +x network-tunnel-manager.sh && \ ./network-tunnel-manager.sh --help ``` ###### 2. Run tests with NTM ```sh ./network-tunnel-manager.sh exit_policy_test_connectivity ./network-tunnel-manager.sh exit_policy_tests ``` - The output should look like this: ###### 3. Optionally you can do some manual sanity checks - Run this command to define variable `BLOCKED_IP` and try to `ping` it: ```shell BLOCKED_IP=$(grep "ExitPolicy reject" /etc/nym/exit-policy.txt | head -1 | sed -E 's/ExitPolicy reject ([^:]+):.*/\1/' | sed 's/\/.*$//') ping -c 3 $BLOCKED_IP ``` - You should see `100% packet loss` as an outcome. ```shell telnet $BLOCKED_IP 80 ``` - You should see `telnet: Unable to connect to remote host: Connection timed out`.