How do I tell apt to never upgrade a particular package?

Add the following to /etc/apt/preferences

 Package: iceweasel 
 Pin: version 3.0.6*
 Pin-Priority: 1000

To put a package to hold:

echo "package_name hold"|dpkg --set-selections 

To 'unhold' it:

echo "package_name install"|dpkg --set-selecions

To see what your packages on hold are, do an:

dpkg --get-selections | grep hold

You need to pin the package. Put an entry like this in /etc/apt/preferences. You'll need to adjust the version number etc.

Package: mozilla-firefox
Pin: version 1:3.5.*
Pin-Priority: 1000