I cought remotely logon the SSH of Tomato and then type "ether-wake MAC addr" to wake-up the computer on LAN, or logon the web GUI of Tomato and then wake-up in WOL page. Now I want somebody without the permission of the SSH or the web GUI of Tomato to wake-up my specified computer on LAN via WOL client software like Magic Packet Utility. I've tested it OK over LAN but failed over internet. http://www.wakeonlan.me/ When I set as above in Port Forwarding page the Tomato echos 192.168.0.255 invalid IP address. Then I try to add a firewall rule for my vpn client (tun mode) as follows Code: iptables -A FORWARD -i tun+ -s 10.8.0.0/24 -d 192.168.0.255 -p udp --dport 2304 -j ACCEPT # Magic Packet Utility uses port 2304 It doesn't work either. And this firewall rule will be disappeared automatically after a while. :frown: From google After checked "allow multicast" in Firewall page of Tomato it still doesn't work. Does Tomato allow "Subnet Directed Boradcasts" ?