title: DiG transfer fails with axfr options
body: <p>For testing purposes, I'm trying to get a list of all DNS records set for a domain, using <a href="https://serverfault.com/a/72504/152253">this method</a>. </p>
  
  <p>This works:</p>
  
  <pre class="lang-none prettyprint-override"><code>root@cs:/# dig @nameserver domain
  
  ; &lt;&lt;&gt;&gt; DiG 9.9.2-P1 &lt;&lt;&gt;&gt; @nameserver domain
  ; (2 servers found)
  ;; global options: +cmd
  ;; Got answer:
  ;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 32999
  ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
  
  ;; OPT PSEUDOSECTION:
  ; EDNS: version: 0, flags:; udp: 4096
  ;; QUESTION SECTION:
  ;domain.           IN      A
  
  ;; ANSWER SECTION:
  domain.    3600    IN      A       my-IP
  
  ;; Query time: 2 msec
  ;; SERVER: my-IPv6-IP-(I-think)
  ;; WHEN: Thu Jun 20 16:03:05 2013
  ;; MSG SIZE  rcvd: 83
  </code></pre>
  
  <p>However, when I add <code>axfr</code> to the command as is suggested in that answer on Server Fault (and all over the net), it fails:</p>
  
  <pre class="lang-none prettyprint-override"><code>root@cs:/# dig @ns1.transip.nl changeyourschool.nl axfr
  
  ; &lt;&lt;&gt;&gt; DiG 9.9.2-P1 &lt;&lt;&gt;&gt; @ns1.transip.nl changeyourschool.nl axfr
  ; (2 servers found)
  ;; global options: +cmd
  ; Transfer failed.
  </code></pre>
  
  <p>Why is this, and, more importantly, how can I get the full list of DNS records if this fails?</p>