but, is it clear enough that these reboots are being triggered remotely?

absolutely. i seem to be able to let the machine sit for basically ever, so long as i don't connect it to the internet. 

it's tempting, isn't it. but, it's not realistic - i'd have to run these machines in parallel, and that's wasteful. and, i've been very clear that i don't want to use this machine for local email. i need to keep fighting this.

it seems to be using ports 67/68 over udp to trigger the reboot, which appears to be a network admin thing. again - all information suggests i'm dealing with some kind of pro.

what happens if i block those ports?