You would need udp broadcast enabled on your network, but directing it would remove the need for this plugin entirely.
I don’t know why you need an arp entry in firewall. WOL is layer 2. If you’re able to ping to all the “Subnet’s” you should be able to specify the broadcast address of that particular subnet.