ok so thats a good method:
stop itunes connecting to the internet!
If you have the firmware already delete it - that way it will never be able to update even if you press the button by mistake.
If you decide to use itunes then allow it through the firewall when the phone is NOT connected, then stop it connecting and then plug the phone back in.
Good idea!