Summary
A wake-up call as a pattern of knocks does take a bit more work than the other two methods, but it also offers much greater security – and requires a Linux router. On the other hand, the risk that stems from a redirect rule on a hardware router is low to begin with, so that this option is also recommended.
The danger of an attacker taking over your LAN only by means of unanswered UDP packets is relatively low – probably much lower than the risk of the protocols used after that being used to attack the computer that was been woken up. In selecting server programs, you should always remember to consider the protection of personal data. (je)