diff --git a/network/filter-updates b/network/filter-updates
index 5fec48b..7ab1b05 100644
--- a/network/filter-updates
+++ b/network/filter-updates
@@ -1,11 +1,19 @@
+# Yum filters
+# -----------------------------------------------------------------------------
 /repodata/[A-Za-z0-9-]*\(primary\|filelists\|comps\(-[a-z0-9]*\)\?\|other\|prestodelta\|updateinfo\|pkgtags\)\.\(sqlite\|xml\)\(\.bz2\|\.gz\)\?$
 /repodata/repomd\.xml$
 \.rpm$
 \.drpm$
 ^mirrors\.fedoraproject\.org:443$
 ^http://mirrors\..*/mirrorlist\?
-\.deb$
-/dists/[a-z-]*/\(InRelease\|Release\|Release.gpg\)$
-/dists/[a-z-]*/.*/\(Packages\|Sources\|Release\)\(\|\.gz\|\.bz2\|\.xz\|\.lzma\|.*\)$
-/dists/[a-z-]*/.*/\(Contents\|Translation\)-.*\(\|\.gz\|\.xz\|\.bz2\|\.lzma\)$
-/dists/[a-z-]*/.*/\(Contents-.*\|Translation-.*\|Packages\)\.diff/\(Index\|[0-9.-]*\)\(\|\.gz\|\.xz\|\.bz2\|\.lzma\)$
+
+# Debian filters
+# 
+# Whonix uses sourceforge to host its repos and url can end in:
+# '/' or '/download' or '?.*'
+# -----------------------------------------------------------------------------
+\.deb\(\|\/\|\/download\|\?.*\)$
+/dists/[a-z-]*/\(InRelease\|Release\|Release.gpg\)\(\|\/\)$
+/dists/[a-z-]*/.*/\(Packages\|Sources\|Release\)\(\|\.gz\|\.bz2\|\.xz\|\.lzma\|\.gpg\)\(\|\|/\|\/download\|\?.*\)$
+/dists/[a-z-]*/.*/\(Contents\|Translation\)-.*\(\|\.gz\|\.xz\|\.bz2\|\.lzma\)\(\|\/\)$
+/dists/[a-z-]*/.*/\(Contents-.*\|Translation-.*\|Packages\)\.diff/\(Index\|[0-9.-]*\)\(\|\.gz\|\.xz\|\.bz2\|\.lzma\)\(\|\/\)$