if you want a simple test, just set the egress to 8.8.8.8/32...... set up the relays and ext client and see if you can ping 8.8.8.8 from the external client