Wake on LAN packets

If I set up my firewall properly, and do not allow unauthorized packets through, would Microsoft still be able to get a “Wake on LAN” packet through and turn on my computer remotely?