We believe that your issue has been closed by the upload of
Version 0.9.33 of grml-live from Michael Prokop <mika@grml.org>.
The explanation is attached below

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 30 Dec 2009 02:34:38 +0100
Source: grml-live
Binary: grml-live grml-live-addons
Architecture: source all
Version: 0.9.33
Distribution: unstable
Urgency: low
Maintainer: Michael Prokop <mika@grml.org>
Changed-By: Michael Prokop <mika@grml.org>
Description: 
 grml-live  - build system for creating a Grml (based) Linux live system
 grml-live-addons - templates/boot/addons for grml-live
Changes: 
 grml-live (0.9.33) unstable; urgency=low
 .
   [ Michael Prokop ]
   * Switch order of mirror configuration in example config.
     Thanks for the hint, formorer.
   * Write current date to last output line of grml-live so the user
     knows how "old" his build is while sitting at the shell prompt.
   * Integrate /etc/grml/fai/config/scripts/GRMLBASE/01-packages
     as package installation validator.
   * Update sources.list handling:
     - Disable deb-src by default in sources.list. People usually
       won't need this and the ones that want it know how to enable
       it. Therefore let's save traffic on the mirrors.
     - Note usage of GeoIP-selected mirrors.
     - Add commented examples for DE/AT mirrors.
     Thanks for the suggestions to Sedat Dilek. [Closes: issue756]
   * Use /sbin/mount.ntfs-3g as default handler for ntfs. Thanks
     for bringing this issue up, Richard Hartmann.
   * templates/boot/grub/menu.lst: drop bootoption lang=us, we
     specify the default within grml-autoconfig nowadays.
   * Support configuration variable EXIT_ON_MISSING_PACKAGES to exit
     with returncode != 0 if a requested package isn't available on the
     resulting ISO.
   * Drop memtest86+ from Depends as it's shipped by grml-live-addons
     nowadays (see issue717). Instead be more verbose in the warning
     message if neither the one from grml-live-addons nor memtest86+
     can be found.
   * Software related changes:
     - Main GRML* classes:
       + add grml-udev-config (we use Debian's udev from now on and
         provide our own udev stuff through grml-udev-config)
       + drop grml-scanpartitions
       + move all grml-* packages that used to be part of all Grml
         flavours to GRMLBASE and drop them from the flavour
         specific configuration instead
     - GRML_FULL:
       + Add fsarchiver
       + Add gdisk
       + Add infiniband-diags
       + Add iscsitarget-module-2.6.31-grml64
       + Add mbuffer
       + Add modem-cmd
       + Add nbd-server + nbd-client (thanks to Xuân Baldauf).
       + Drop dvi2tty (so we don't pull tex-common and texlive-binaries
         into the system).
       + Drop lomoco (bad state, unnecessary)
     - GRML_MEDIUM:
       + Add iptraf (thanks, thermoman)
       + Drop (unavailable) at76-usb-modules-2.6.31-grml
     - Mixed:
       + Add kexec-tools to GRML_SMALL + GRML_MEDIUM (thanks,
         Christoph Biedl)
       + Add lcrack to GRML_FORENSIC
       + Drop fakechroot from GRML_FULL + GRML_FORENSIC (the package is
         in a bad shape since several months)
       + Drop grml-mercurial-utils from GRML_FULL and GRML_MEDIUM as
         we use git nowadays
 .
   [ Thorsten Glaser ]
   * Update MirOS bsd4grml to 20091226.
Checksums-Sha1: 
 42fd5b1ad1a6c343796f66253e5e20e81da97046 901 grml-live_0.9.33.dsc
 f5285660cc14dbb425f80b7c5af4fea6f4c7ac37 8233817 grml-live_0.9.33.tar.gz
 f0f6675fd2ed5d794bf41643e1b8308c39c5465f 1123624 grml-live_0.9.33_all.deb
 7081a8a3a2a331b379b4d7b5d713a6925346e5cf 7149728 grml-live-addons_0.9.33_all.deb
Checksums-Sha256: 
 e8da69871db78d48861d62ef9c60a05ae05a3c9e8a92c6449c991a5e788bf46f 901 grml-live_0.9.33.dsc
 14a15b1d8db7b36c9f5871155a8e810285a817acfd9baa60f31989799946d9e9 8233817 grml-live_0.9.33.tar.gz
 d17c6043e387f05c336958815ff461aea0349f73f1567e59031cb1bc0b537f84 1123624 grml-live_0.9.33_all.deb
 a491bb2dedb2481da13c9748bbffbac9221c78e0f35289db705e9ed0723de4b7 7149728 grml-live-addons_0.9.33_all.deb
Files: 
 a224226099b39a2e501d3419dafd0e9a 901 grml extra grml-live_0.9.33.dsc
 d954a226fd80da5d9d5b82973f0dba0b 8233817 grml extra grml-live_0.9.33.tar.gz
 ef54454effe9ed389ed27d00c5b64e20 1123624 grml extra grml-live_0.9.33_all.deb
 9d01b1da41f1f45de957ec0ae1f1d698 7149728 grml extra grml-live-addons_0.9.33_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFLOrBl2N9T+zficugRAhMiAJ47VPZ+BaFHbctKPdeZveVrfHylVQCfbjar
rLvP0q/i8kWM7KQeJxG5aTw=
=h/yK
-----END PGP SIGNATURE-----

I like the idea, deferring this issue behind release grml 2009.10 though for 
now.

thanks && regards,
-mika-

Here in English:

According to [1]:
grml-live (build system for creating a Grml (based) Linux live system):
...
* replace all references to ftp.de.debian.org with cdn.debian.org
...

On the first sight, this change needs IMHO some explanations:
<cdn.debian.net> (*.org see above is btw wrong) was introduced to select the
best available local Debian-mirror via geo-ip localisation.
For example:
A user from AT (Austria) will get the AT-Debian-mirror for upgrades.

This could be manifested in a further step as a comment in debian.list:

[debian.list]
# official debian repository (mirror selected via geo-ip):
  deb     http://cdn.debian.net/debian/ sid main contrib non-free
#  deb-src http://cdn.debian.net/debian/ sid main contrib non-free

# official debian repository:
#  deb     http://ftp.debian.org/debian/ sid main contrib non-free
#  deb-src http://ftp.debian.org/debian/ sid main contrib non-free

# official debian DE repository:
#  deb     http://ftp.de.debian.org/debian/ sid main contrib non-free
#  deb-src http://ftp.de.debian.org/debian/ sid main contrib non-free

# official debian AT repository:
#  deb     http://ftp.at.debian.org/debian/ sid main contrib non-free
#  deb-src http://ftp.at.debian.org/debian/ sid main contrib non-free
- EOF -

As a next wish I would recommend to comment the lines beginning with "deb-src".
GRML user should know how and where to activate sources.
BTW, this chnage will save needless Internet traffic.

As a goodie I would cite - admittedly commented - and as examples DE and AT for
Debian-mirrors.
If there are problems with the cdn-service, user can easily switch to their
preferred mirror.

- Sedat -

[1] http://grml.org/changelogs/README-grml-2009.10/

Gemäss [1]:
grml-live (build system for creating a Grml (based) Linux live system):
...
* replace all references to ftp.de.debian.org with cdn.debian.org
...

Es wäre wünschenswert etwas näher zu erläutern, warum man jetzt auf
<cdn.debian.net> (übrigens oben falsch, nicht *.org) umgestiegen ist: Wegen
Geo-IP-Lokalisierung wird der am besten erreichbare (schnellste) Debian-Mirror
selektiert, sprich AT-user bekommt den AT-Debian-Mirror für Upgrades.

Ich würde noch einen Schritt weiter gehen und das in die debian.list mit
Kommentar verewigen:

# cat debian.list
# official debian repository (mirror selected via geo-ip):
  deb     http://cdn.debian.net/debian/ sid main contrib non-free
#  deb-src http://cdn.debian.net/debian/ sid main contrib non-free

# official debian repository:
#  deb     http://ftp.debian.org/debian/ sid main contrib non-free
#  deb-src http://ftp.debian.org/debian/ sid main contrib non-free

# official debian DE repository:
#  deb     http://ftp.de.debian.org/debian/ sid main contrib non-free
#  deb-src http://ftp.de.debian.org/debian/ sid main contrib non-free

# official debian AT repository:
#  deb     http://ftp.at.debian.org/debian/ sid main contrib non-free
#  deb-src http://ftp.at.debian.org/debian/ sid main contrib non-free
- EOF -

Nächster Wunsch wäre die deb-src lines zu kommentieren, bauscht unnötig Traffic
auf. Wer Sourcen benötigt, weiss i.d.R. wo er diese freischalten kann.

Als Bonbon würde ich - allerdings kommentiert - und als Bsp.e DE und AT
Debian-Mirrors aufführen.
Falls es Probleme mit dem cdn-Dienst geben sollte oder ein anderer Mirror hakelt.

- Sedat -

[1] http://grml.org/changelogs/README-grml-2009.10/