The MKS Toolkit rsh and rexec clients bind to the stderr port (1021) when setting up connections. This causes a Windows Security Alert to open on your desktop. 
However, these are trustworthy applications and can safely be unblocked. Once you have done so, you will no longer receive security alerts for these applications. | 
