Unauthorized emails still create drafts or posts

Hi,

I’m trying to configure Postie on a WordPress site to publish posts by email, but I’m having an issue with unauthorized emails.

My setup is:

WordPress site: single site
Postie version: 1.9.76
PHP version: 8.3.29
Mail protocol: IMAP-SSL
Mail server: imap.gmail.com
Port: 993
Connection: sockets
Mailbox: Gmail account dedicated to Postie

The connection test works correctly:

Successful IMAP-SSL connection on port 993

In the Postie settings I have configured:

Allow Anyone To Post Via Email: No
Authorized Addresses: only one email address, the address I want to allow for publishing
Forward Rejected Mail: No

The problem is that Postie still seems to process emails that come from non-authorized addresses. Sometimes it creates draft posts, and in other cases it appears to publish or process emails that should be rejected.

I also received this message for an unauthorized email:

“An unauthorized message has been sent to u Pallon.
Sender: sportvibes.bari@gmail.com
Subject: Prova 2

If you wish to allow posts from this address, please add sportvibes.bari@gmail.com to the registered users list…”

So Postie seems to recognize that the sender is unauthorized, but it still creates drafts or otherwise processes the rejected messages.

What I need is:

Only emails from the single authorized address should be converted into posts.
All other emails should be completely ignored or deleted, without creating drafts, posts, or notifications.

Is there another setting I should check? Could this be related to the Gmail/IMAP setup, the author matching by email, or the “registered users” behavior?

Thanks for your help.