DNS Error, rcode=REFUSED

I’m confused by the errors I’m getting. I just created a new Ubuntu 22 box and installed v60 of mail-in-a-box. I’m pretty sure I setup glue records correctly on namecheap, but the admin page says:

Nameserver glue records are incorrect. The ns1.box.mydomain.com and ns2.box.mydomain.com nameservers must be configured at your domain name registrar as having the IP address (myIp). They currently report addresses of [Not Set]/[Not Set]. It may take several hours for public DNS to update after a change.

Running the command

$ dig @1.1.1.1 box.mydomain.com

Gives errors “No Reachable Authority” and “Network Error rcode=REFUSED”

; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> @1.1.1.1 box.mydomain.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 26307
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 22 (No Reachable Authority): (at delegation mydomain.com.)
; EDE: 23 (Network Error): (myIp:53 rcode=REFUSED for box.mydomain.com A)
;; QUESTION SECTION:
;box.mydomain.com. IN A

;; Query time: 21 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Thu Oct 13 18:38:54 PDT 2022
;; MSG SIZE rcvd: 145

Could DNSSec be causing this? I disabled it about an hour ago.

Absolutely!

You may need to wait up to 24 hours for DNSSEC to become totally disabled.