The easiest solution to the desire to not upgrade was posted a long time ago . . . Simple rename "url.ini" in CCP to something else. Then it does not have a "phone home" site defined, and does not try. If you ever decide to take an update, simple rename it back . . . No dirking around on the network, firewalls, etc. and if you happen to bring up CCP somewhere else, it can't connect outside your firewall and break your installation.