IPv6-privacy-hack.nft

    chain postrouting {
        type nat hook postrouting priority 110; policy accept;
        oifgroup wan  (ip6 saddr & ::ff:ff00:0) == ::ff:fe00:0  counter \
	    ip6 saddr vmap { \
              2001:678:4d8::/64 :      jump postrouting-debby-snat-privacy, \
      	      2001:678:4d8:2d00::/64 : jump postrouting-ruddy-snat-privacy, \
	    }
    }

    chain postrouting-debby-snat-privacy {
        counter
	snat ip6 to 2001:678:4d8::00ff:fe00:0/104 fully-random persistent
    }
    chain postrouting-ruddy-snat-privacy {
        counter
        snat ip6 to 2001:678:4d8:2d00::00ff:fe00:0/104 fully-random persistent
    }