After reading Making `email in min trust` site setting more consistent with `Accept email from anonymous users without account` category setting I think it is likely the email in allowed groups setting
Are your users allowed to post in that private category?