This looks like Google has forgotten to create the zone 96.34.in-addr.arpa but have created 180.96.34.in-addr.arpa resulting in answers that should come from 96.34.in-addr.arpa getting REFUSED returned. DNSSEC validation and QNAME minimisation find these sorts of configuration errors. Intermediate zones can’t be missed.
% dig ns 96.34.in-addr.arpa +trace +all ;; BADCOOKIE, retrying. ; <<>> DiG 9.19.24-dev <<>> ns 96.34.in-addr.arpa +trace +all ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23007 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ; COOKIE: 7b100d5f1abe6a3301000000662eea5988229ff2514536e1 (good) ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 274739 IN NS a.root-servers.net. . 274739 IN NS g.root-servers.net. . 274739 IN NS h.root-servers.net. . 274739 IN NS b.root-servers.net. . 274739 IN NS j.root-servers.net. . 274739 IN NS i.root-servers.net. . 274739 IN NS c.root-servers.net. . 274739 IN NS d.root-servers.net. . 274739 IN NS l.root-servers.net. . 274739 IN NS e.root-servers.net. . 274739 IN NS m.root-servers.net. . 274739 IN NS k.root-servers.net. . 274739 IN NS f.root-servers.net. . 274739 IN RRSIG NS 8 0 518400 20240508210000 20240425200000 5613 . YeVEKbhLW5fUll0QPjIjDWfKbmrnJ/paeh/H86oG17GPeoFRWkecq+iM 8kjxy28AHg7cElZ3w8Lq0GND+DJUCYItS6cOHdQ07XdEFCPAoXMnVQe2 sBwd5nRu8tjH/I6NOn43DtfGkNMxzoHZf/64UeWeMFF8tjlD3y9Y+TQ1 UjBU0kzpsYXkl+QYHsNJ1nABDH3gdlTqpCmtrVA1UUgDjC/12KLSIiQH ykSABJZbHnOsDc7OaRH25QLZadE6zrUwP1xiEZuDfe4xuoz2z5WSBQbv 6JjCGVpm1WDILRra64v4BpO0kVUYE5fvJgAOV2cJwJwhM4gpcBNlMvG7 e3+WFA== ;; ADDITIONAL SECTION: i.root-servers.net. 169819 IN AAAA 2001:7fe::53 d.root-servers.net. 169819 IN AAAA 2001:500:2d::d h.root-servers.net. 169819 IN AAAA 2001:500:1::53 j.root-servers.net. 169819 IN AAAA 2001:503:c27::2:30 c.root-servers.net. 169819 IN AAAA 2001:500:2::c e.root-servers.net. 169819 IN AAAA 2001:500:a8::e g.root-servers.net. 169819 IN AAAA 2001:500:12::d0d l.root-servers.net. 169819 IN AAAA 2001:500:9f::42 m.root-servers.net. 169819 IN AAAA 2001:dc3::35 k.root-servers.net. 169819 IN AAAA 2001:7fd::1 a.root-servers.net. 169819 IN AAAA 2001:503:ba3e::2:30 f.root-servers.net. 169819 IN AAAA 2001:500:2f::f b.root-servers.net. 169819 IN AAAA 2801:1b8:10::b i.root-servers.net. 169819 IN A 192.36.148.17 d.root-servers.net. 169819 IN A 199.7.91.13 h.root-servers.net. 169819 IN A 198.97.190.53 j.root-servers.net. 169819 IN A 192.58.128.30 c.root-servers.net. 169819 IN A 192.33.4.12 e.root-servers.net. 169819 IN A 192.203.230.10 g.root-servers.net. 169819 IN A 192.112.36.4 l.root-servers.net. 169819 IN A 199.7.83.42 m.root-servers.net. 169819 IN A 202.12.27.33 k.root-servers.net. 169819 IN A 193.0.14.129 a.root-servers.net. 169819 IN A 198.41.0.4 f.root-servers.net. 169819 IN A 192.5.5.241 b.root-servers.net. 169819 IN A 170.247.170.2 ;; Query time: 0 msec ;; SERVER: ::1#53(::1) (UDP) ;; WHEN: Mon Apr 29 10:31:21 AEST 2024 ;; MSG SIZE rcvd: 1125 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39695 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 11, ADDITIONAL: 13 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ;; QUESTION SECTION: ;96.34.in-addr.arpa. IN NS ;; AUTHORITY SECTION: in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. in-addr.arpa. 86400 IN DS 53696 8 2 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF in-addr.arpa. 86400 IN DS 47054 8 2 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2 in-addr.arpa. 86400 IN DS 63982 8 2 AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73 in-addr.arpa. 86400 IN DS 54956 8 2 E0E2BF5CFBD66572CA05EC18267D91509BA6A9405AF05C3FD4141DFA 45200C08 in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 20240511180000 20240428170000 43060 arpa. BBFF1T9b8+woUukDfJj8wBKwDyk2CGVfceNAX5S1LvANDal0g3gf0hFD 7OhTWZR1yaMoMaLVDgh8b9rDe5gMpOABbCHI/OBByz/rpUgau+XZ5aTJ NSJbmBcQRkzelreqm/B+4bjYtn48cK5Lp/iZm7hDHqJ1L/asdF7SRpRc BxFQeSf3eOy5BKL/XjlrsGZ510v2bnIlhLZPvjBPinbK10QeXzWOUW3J QtsY8MyTl0NE3prBU7bA20bkm+yBn4KMEzWeBz7rYfr6WJoGAw+I2ijM J6oC3ims4b1bF7eaPJ4DW6QZJu04a4C/JeluU/RMzWJC11MS2M1RRUf8 /XcxmQ== ;; ADDITIONAL SECTION: f.in-addr-servers.arpa. 172800 IN A 193.0.9.1 e.in-addr-servers.arpa. 172800 IN A 203.119.86.101 d.in-addr-servers.arpa. 172800 IN A 200.10.60.53 c.in-addr-servers.arpa. 172800 IN A 196.216.169.10 b.in-addr-servers.arpa. 172800 IN A 199.253.183.183 a.in-addr-servers.arpa. 172800 IN A 199.180.182.53 f.in-addr-servers.arpa. 172800 IN AAAA 2001:67c:e0::1 e.in-addr-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 d.in-addr-servers.arpa. 172800 IN AAAA 2001:13c7:7010::53 c.in-addr-servers.arpa. 172800 IN AAAA 2001:43f8:110::10 b.in-addr-servers.arpa. 172800 IN AAAA 2001:500:87::87 a.in-addr-servers.arpa. 172800 IN AAAA 2620:37:e000::53 ;; Query time: 30 msec ;; SERVER: 202.12.27.33#53(m.root-servers.net) (UDP) ;; WHEN: Mon Apr 29 10:31:21 AEST 2024 ;; MSG SIZE rcvd: 923 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44039 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ;; QUESTION SECTION: ;96.34.in-addr.arpa. IN NS ;; AUTHORITY SECTION: 34.in-addr.arpa. 86400 IN NS r.arin.net. 34.in-addr.arpa. 86400 IN NS u.arin.net. 34.in-addr.arpa. 86400 IN NS x.arin.net. 34.in-addr.arpa. 86400 IN NS y.arin.net. 34.in-addr.arpa. 86400 IN NS z.arin.net. 34.in-addr.arpa. 86400 IN NS arin.authdns.ripe.net. 34.in-addr.arpa. 86400 IN DS 11366 8 2 3F7F017BDB9BDBB3A19B8B69DD51627ED8AE4E138F9EECD755AA7D27 7CFAB795 34.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 20240514050540 20240423021933 37980 in-addr.arpa. pkQcSZqryMqgUsMaAw5KC8tVNAf0yi/kyy17ud4PLHkB1NATnVzAHYZm +/Sm8moPBm6lDnqUdMEfuDa0Jfpwm0kavVejnN9harFuUu43EdpZENri xrgWXws30IhczI4MM8wapWeX/6nCD7sB/BuQW/yV6O6jNkPM/jyBmMsV Sts= ;; Query time: 461 msec ;; SERVER: 196.216.169.10#53(c.in-addr-servers.arpa) (UDP) ;; WHEN: Mon Apr 29 10:31:22 AEST 2024 ;; MSG SIZE rcvd: 387 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62944 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ;; QUESTION SECTION: ;96.34.in-addr.arpa. IN NS ;; AUTHORITY SECTION: 96.34.in-addr.arpa. 86400 IN NS ns-gce-public1.googledomains.com. 96.34.in-addr.arpa. 86400 IN NS ns-gce-public2.googledomains.com. 96.34.in-addr.arpa. 86400 IN NS ns-gce-public3.googledomains.com. 96.34.in-addr.arpa. 86400 IN NS ns-gce-public4.googledomains.com. 96.34.in-addr.arpa. 10800 IN NSEC 97.34.in-addr.arpa. NS RRSIG NSEC 96.34.in-addr.arpa. 10800 IN RRSIG NSEC 8 4 10800 20240512043000 20240428033000 34368 34.in-addr.arpa. oqSjTnBdaBb7n4QxJ3spQTYRDJ1bHCflOjvECoeYY4DdDyNUzQMUgR9U L+a8hn6nxdi7NFVIbS9l+c8KTZtM5DjNiTlHgYnXvnqENfRR9lervjCw PA/wbmrRwRyuaI8jXaOwKiH9N6/VyskkdtmhN/0MWUOXQ00M3HtPFRKh 5zs= ;; Query time: 346 msec ;; SERVER: 2001:67c:e0::10#53(arin.authdns.ripe.net) (UDP) ;; WHEN: Mon Apr 29 10:31:22 AEST 2024 ;; MSG SIZE rcvd: 395 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 15319 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 512 ; COOKIE: 7b100d5f1abe6a33011dc0242ca3b88f01fbf7e0b470e2eb0d3922ebf4 (good) ;; QUESTION SECTION: ;96.34.in-addr.arpa. IN NS ;; Query time: 279 msec ;; SERVER: 2001:4860:4802:36::66#53(ns-gce-public3.googledomains.com) (UDP) ;; WHEN: Mon Apr 29 10:31:22 AEST 2024 ;; MSG SIZE rcvd: 80 % % dig ns 180.96.34.in-addr.arpa +trace +all ;; BADCOOKIE, retrying. ; <<>> DiG 9.19.24-dev <<>> ns 180.96.34.in-addr.arpa +trace +all ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21491 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ; COOKIE: cd143583dd37c5d001000000662eea99aef9454dc89ea2cc (good) ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 274675 IN NS e.root-servers.net. . 274675 IN NS m.root-servers.net. . 274675 IN NS a.root-servers.net. . 274675 IN NS h.root-servers.net. . 274675 IN NS i.root-servers.net. . 274675 IN NS b.root-servers.net. . 274675 IN NS c.root-servers.net. . 274675 IN NS d.root-servers.net. . 274675 IN NS j.root-servers.net. . 274675 IN NS g.root-servers.net. . 274675 IN NS f.root-servers.net. . 274675 IN NS k.root-servers.net. . 274675 IN NS l.root-servers.net. . 274675 IN RRSIG NS 8 0 518400 20240508210000 20240425200000 5613 . YeVEKbhLW5fUll0QPjIjDWfKbmrnJ/paeh/H86oG17GPeoFRWkecq+iM 8kjxy28AHg7cElZ3w8Lq0GND+DJUCYItS6cOHdQ07XdEFCPAoXMnVQe2 sBwd5nRu8tjH/I6NOn43DtfGkNMxzoHZf/64UeWeMFF8tjlD3y9Y+TQ1 UjBU0kzpsYXkl+QYHsNJ1nABDH3gdlTqpCmtrVA1UUgDjC/12KLSIiQH ykSABJZbHnOsDc7OaRH25QLZadE6zrUwP1xiEZuDfe4xuoz2z5WSBQbv 6JjCGVpm1WDILRra64v4BpO0kVUYE5fvJgAOV2cJwJwhM4gpcBNlMvG7 e3+WFA== ;; ADDITIONAL SECTION: i.root-servers.net. 169755 IN AAAA 2001:7fe::53 d.root-servers.net. 169755 IN AAAA 2001:500:2d::d h.root-servers.net. 169755 IN AAAA 2001:500:1::53 j.root-servers.net. 169755 IN AAAA 2001:503:c27::2:30 c.root-servers.net. 169755 IN AAAA 2001:500:2::c e.root-servers.net. 169755 IN AAAA 2001:500:a8::e g.root-servers.net. 169755 IN AAAA 2001:500:12::d0d l.root-servers.net. 169755 IN AAAA 2001:500:9f::42 m.root-servers.net. 169755 IN AAAA 2001:dc3::35 k.root-servers.net. 169755 IN AAAA 2001:7fd::1 a.root-servers.net. 169755 IN AAAA 2001:503:ba3e::2:30 f.root-servers.net. 169755 IN AAAA 2001:500:2f::f b.root-servers.net. 169755 IN AAAA 2801:1b8:10::b i.root-servers.net. 169755 IN A 192.36.148.17 d.root-servers.net. 169755 IN A 199.7.91.13 h.root-servers.net. 169755 IN A 198.97.190.53 j.root-servers.net. 169755 IN A 192.58.128.30 c.root-servers.net. 169755 IN A 192.33.4.12 e.root-servers.net. 169755 IN A 192.203.230.10 g.root-servers.net. 169755 IN A 192.112.36.4 l.root-servers.net. 169755 IN A 199.7.83.42 m.root-servers.net. 169755 IN A 202.12.27.33 k.root-servers.net. 169755 IN A 193.0.14.129 a.root-servers.net. 169755 IN A 198.41.0.4 f.root-servers.net. 169755 IN A 192.5.5.241 b.root-servers.net. 169755 IN A 170.247.170.2 ;; Query time: 0 msec ;; SERVER: ::1#53(::1) (UDP) ;; WHEN: Mon Apr 29 10:32:25 AEST 2024 ;; MSG SIZE rcvd: 1125 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11058 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 11, ADDITIONAL: 13 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ; COOKIE: cd143583dd37c5d001000000662eea9976945a7ec72a5c5d (good) ;; QUESTION SECTION: ;180.96.34.in-addr.arpa. IN NS ;; AUTHORITY SECTION: in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. in-addr.arpa. 86400 IN DS 53696 8 2 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF in-addr.arpa. 86400 IN DS 63982 8 2 AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73 in-addr.arpa. 86400 IN DS 47054 8 2 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2 in-addr.arpa. 86400 IN DS 54956 8 2 E0E2BF5CFBD66572CA05EC18267D91509BA6A9405AF05C3FD4141DFA 45200C08 in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 20240511180000 20240428170000 43060 arpa. BBFF1T9b8+woUukDfJj8wBKwDyk2CGVfceNAX5S1LvANDal0g3gf0hFD 7OhTWZR1yaMoMaLVDgh8b9rDe5gMpOABbCHI/OBByz/rpUgau+XZ5aTJ NSJbmBcQRkzelreqm/B+4bjYtn48cK5Lp/iZm7hDHqJ1L/asdF7SRpRc BxFQeSf3eOy5BKL/XjlrsGZ510v2bnIlhLZPvjBPinbK10QeXzWOUW3J QtsY8MyTl0NE3prBU7bA20bkm+yBn4KMEzWeBz7rYfr6WJoGAw+I2ijM J6oC3ims4b1bF7eaPJ4DW6QZJu04a4C/JeluU/RMzWJC11MS2M1RRUf8 /XcxmQ== ;; ADDITIONAL SECTION: f.in-addr-servers.arpa. 172800 IN AAAA 2001:67c:e0::1 e.in-addr-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 d.in-addr-servers.arpa. 172800 IN AAAA 2001:13c7:7010::53 c.in-addr-servers.arpa. 172800 IN AAAA 2001:43f8:110::10 b.in-addr-servers.arpa. 172800 IN AAAA 2001:500:87::87 a.in-addr-servers.arpa. 172800 IN AAAA 2620:37:e000::53 f.in-addr-servers.arpa. 172800 IN A 193.0.9.1 e.in-addr-servers.arpa. 172800 IN A 203.119.86.101 d.in-addr-servers.arpa. 172800 IN A 200.10.60.53 c.in-addr-servers.arpa. 172800 IN A 196.216.169.10 b.in-addr-servers.arpa. 172800 IN A 199.253.183.183 a.in-addr-servers.arpa. 172800 IN A 199.180.182.53 ;; Query time: 261 msec ;; SERVER: 2001:7fe::53#53(i.root-servers.net) (UDP) ;; WHEN: Mon Apr 29 10:32:25 AEST 2024 ;; MSG SIZE rcvd: 955 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20490 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ; COOKIE: cd143583dd37c5d001000000662eea9af9f57e1947085008 (good) ;; QUESTION SECTION: ;180.96.34.in-addr.arpa. IN NS ;; AUTHORITY SECTION: 34.in-addr.arpa. 86400 IN NS arin.authdns.ripe.net. 34.in-addr.arpa. 86400 IN NS x.arin.net. 34.in-addr.arpa. 86400 IN NS y.arin.net. 34.in-addr.arpa. 86400 IN NS r.arin.net. 34.in-addr.arpa. 86400 IN NS u.arin.net. 34.in-addr.arpa. 86400 IN NS z.arin.net. 34.in-addr.arpa. 86400 IN DS 11366 8 2 3F7F017BDB9BDBB3A19B8B69DD51627ED8AE4E138F9EECD755AA7D27 7CFAB795 34.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 20240514050540 20240423021933 37980 in-addr.arpa. pkQcSZqryMqgUsMaAw5KC8tVNAf0yi/kyy17ud4PLHkB1NATnVzAHYZm +/Sm8moPBm6lDnqUdMEfuDa0Jfpwm0kavVejnN9harFuUu43EdpZENri xrgWXws30IhczI4MM8wapWeX/6nCD7sB/BuQW/yV6O6jNkPM/jyBmMsV Sts= ;; Query time: 238 msec ;; SERVER: 2620:37:e000::53#53(a.in-addr-servers.arpa) (UDP) ;; WHEN: Mon Apr 29 10:32:25 AEST 2024 ;; MSG SIZE rcvd: 437 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15446 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;180.96.34.in-addr.arpa. IN NS ;; AUTHORITY SECTION: 96.34.in-addr.arpa. 86400 IN NS ns-gce-public3.googledomains.com. 96.34.in-addr.arpa. 86400 IN NS ns-gce-public1.googledomains.com. 96.34.in-addr.arpa. 86400 IN NS ns-gce-public4.googledomains.com. 96.34.in-addr.arpa. 86400 IN NS ns-gce-public2.googledomains.com. 96.34.in-addr.arpa. 10800 IN NSEC 97.34.in-addr.arpa. NS RRSIG NSEC 96.34.in-addr.arpa. 10800 IN RRSIG NSEC 8 4 10800 20240512043000 20240428033000 34368 34.in-addr.arpa. oqSjTnBdaBb7n4QxJ3spQTYRDJ1bHCflOjvECoeYY4DdDyNUzQMUgR9U L+a8hn6nxdi7NFVIbS9l+c8KTZtM5DjNiTlHgYnXvnqENfRR9lervjCw PA/wbmrRwRyuaI8jXaOwKiH9N6/VyskkdtmhN/0MWUOXQ00M3HtPFRKh 5zs= ;; Query time: 222 msec ;; SERVER: 2001:500:127::30#53(y.arin.net) (UDP) ;; WHEN: Mon Apr 29 10:32:26 AEST 2024 ;; MSG SIZE rcvd: 399 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8021 ;; flags: qr aa; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 512 ; COOKIE: cd143583dd37c5d0011dc0242cf583ffbc0df6c25bae1d15235d6b1ee4 (good) ;; QUESTION SECTION: ;180.96.34.in-addr.arpa. IN NS ;; ANSWER SECTION: 180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public2.googledomains.com. 180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public4.googledomains.com. 180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public1.googledomains.com. 180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public3.googledomains.com. 180.96.34.in-addr.arpa. 21600 IN RRSIG NS 8 5 21600 20240518200316 20240426200316 2580 180.96.34.in-addr.arpa. a/v8r8emi3sMgoZXB9G6YG2+UyVpkcwP6V2GF7XhftKjVLxCHOviqLnI shoUfklqEXMLtdBTdzrZNMoWGfwTK3HfiqvhWQCPZVuzPpomwSX1YcXC BaNJ+ww+HRIiXLvxWlE0dFU+RwRCUID4nwnSU//7pQwXn5CIwN0SWNeP wGU= ;; Query time: 282 msec ;; SERVER: 2001:4860:4802:34::66#53(ns-gce-public2.googledomains.com) (UDP) ;; WHEN: Mon Apr 29 10:32:26 AEST 2024 ;; MSG SIZE rcvd: 399 % > On 28 Apr 2024, at 10:13, J Doe <gene...@nativemethods.com> wrote: > > On 2024-04-26 16:45, Josh Kuo wrote: > >> In this particular case, isn't the resolver attempting to do a reverse >> lookup of the IP address that's listed ? >> >> >> You are right, I missed that this is a reverse-mapping zone. In that >> case, run DNSSEC analyzer on the domain "180.96.34.in-addr.arpa" and >> you'll see the problem. Reverse-mapping zones work the same as >> forward-mapping zones, they also need to be delegated properly. >> >> If you prefer a more visual output, try DNSViz: >> https://dnsviz.net/d/180.96.34.in-addr.arpa/dnssec/ >> <https://dnsviz.net/d/180.96.34.in-addr.arpa/dnssec/> > > Hi Josh, > > Ok, sounds good! > > - J > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users