Easiest thing to do would be to do "view source" on the email message and follow the "Received" headers to see all the mail hops. The IP address in the last Received: header is probably the IP of the firewall that's emitting these messages.

To disable these particular messages:

http://kb.juniper.net/InfoCenter/index?page=content&id=KB6389