kdig + AXFR + first message OK + second message SERVFAIL = timeout
When digging AXFR with kdig, and the server responds with first message OK (NOERROR, has SOA, ....), second message with SERVFAIL, kdig is then confused and waits for futher messages, ending with timeout.
Expected: in such case, kdig immediately reports server error and exits.
Observed: similar bug in dnspython, correct behaviour in bind9 dig.