Comment by patch_collector

Network jail isn't a 100% for these -- in their testing, they determined that they could connect to the public Comcast networks that Comcast tries to blanket areas with. So even if you don't let it access your own networks, it will look for other ways to phone home.