I need VNC program that can do 'NAT traversal', like teamviewer, for linux (preferably debian).
'server' needs to run on windows7, viewer on linux.
thanks.

that is total confusion. How temviewer, vnc and nat related to each other?
probably you can use ssh to construct a tunnel and use vnc over that tunnel. https://www.cyberciti.biz/tips/tunne...ssh-howto.html.
Or please explain what do you really want to achieve.

Out of pure interest, why is it that you don't want to use Teamviewer on Linux?

sorry, I need to remotely control windows7 from debian9.
problem is, our internet providers started using CGNAT.
teamviewer does work behind CGNAT, proxy... (like skype for voip and others), but I'd like open source solution.

edit: I have seen some strange file transfer in old teamviewer11 logs, and then there's this too:
https://www.tripwire.com/state-of-se...ack-pc-hijack/
its a funny coincidence that my affected version is also 11.

for some added security, I'd like to 'server' part be completely separate from 'viewer'. I use debian only for controlling windows, never other way round. don't even wanna install server or any kind of new daemon, especially non-FOSS
I know teamviewer can be configured to allow local access only and disable password, but I simply don't trust it any more.

yes, well its sortof too late for that, two years have passed.

[removed]

I think a reverse tunnel would work. You would need a public server somewhere that can be used to setup a ssh reverse tunnel. The viewer would tunnel vnc over the ssh tunnel to the Windows computer.

1 members found this post helpful.

I prefer using RDP to VNC.
Setting up RDP on Windows 7 is detailed here. https://technet.microsoft.com/en-us/.../ff404238.aspx
As a Linux viewer I use 'rdesktop'.
For remote connections to a NAT address behind a Linux server I use a ssh tunnel.

If NAT is the only problem, you may just use a tunneling service, for example, ngrok.

I think NAT/proxy is big deal, it made Skype and Teamviewer 'famous', because they simply work.
There were many other voip and 'remote control' programs before them.
pity we don't have IPv6 already.

I am not sure really what you are asking about. The way MS remote desktop can use nat is by having the abiliity to use UPNP on one end. That was to make it easy for users. If you have access to the router that isn't required. Might have to tell us more about the issue?

Yes, teamviewer did or may still have some issues. Like Skype you have to have their system as part of the transfer usually. Teamviewer as I recall had the passwords leaked or something.

um, guess you never had to endure CGNAT or "fascist proxy" that don't care about UPNP.

anyway, I found 'anydesk', might use that. it supports many OS. its free, but not opensource.
might run that or teamviewer in virtualmachine as temporary solution.

Thanks for the update and solution.