I may add that the security repository also is missing the Contents file, essentially rendering apt-file useless with the default configuration:
# apt-file update Can't get http://security.debian.org/dists/lenny/updates/Contents-i386.gz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
