For running Software Update Server (SUS), is there a way to set up
our master OD server pull down all Apple Software Updates, and have
all our replica servers pull from the primary?
master <-- pulls from Apple
replica <-- pulls from master
replica <-- pulls from master
replica <-- pulls from master
On Leopard you can by editing the /etc/swupd/swupd.plist file. Look
for the key "metaindexURL" - which by default points to
swscan.apple.com.
You can change this to point to your upstream SUS and it should be
good to go.