Update:
I analyzed the headers a little bit more. I compared header to an e-mail I sent to myself and found a discrepancy in the "Received" line.
Known e-mail header:
Received: from jt (pool-71-106-178-20.lsanca.dsl-w.verizon.net [71.106.178.20])
(Authenticated sender:
jt@troen.com)
by sc1-out06.emaildefenseservice.com (Postfix) with ESMTP
for <jt@troen.com>; Wed, 28 Nov 2007 18:41:44 +0000 (UTC)
Suspect header:
Received: from TORCC006 (unknown [10.0.63.29])
(Authenticated sender:
jt@troen.com)
by sc1-out01.emaildefenseservice.com (Postfix) with ESMTP
for <jt@troen.com>; Tue, 27 Nov 2007 14:54:57 +0000 (UTC)
It appears to be from an unknown IP address, though still authenticated as me. Any ideas?
Thanks!