Hi Butterfly, thanks for the reply.
However, I've actually tried the method in the wiki, as well as alternate manual method, neither works. I believe the main reason is the app is running on the router itself, so set a policy with source ip 192.168.1.1 won't work, maybe there are other rules...