Heat Exchanger Surface Rust: Condemn vs Monitor Condition Decision Tree

Why this matters

Surface rust on a furnace heat exchanger is one of the most over-condemned and under-condemned conditions in the trade. A red-brown film on the exterior cabinet steel or the cold end of an exchanger is often cosmetic, while a hairline crack hidden behind that same discoloration can be venting combustion products into the supply air. The decision is binary in consequence: a breached heat exchanger is a carbon monoxide source and the unit must be shut down, while cosmetic rust on intact metal is a monitor. The job is to prove integrity, not to react to color.

This is a condition-based, safety-driven call. It rests on observable evidence of a breach, not on rust appearance or unit age.

Symptom presentation

• Red or brown discoloration on exchanger primary surfaces, the secondary (condensing) coil, or cabinet steel.
• Flame distortion, flicker, or roll-out when the blower starts (a classic crack indicator on a non-condensing exchanger).
• Soot, white powdery deposits at the cold end, or scaling at clamshell seams.
• Elevated ambient CO readings near the supply registers during a burn.
• Customer reports of headaches, odors, or a CO alarm.

Cosmetic-only presentation: light surface film on intact steel, no flame disturbance, normal CO in the supply stream, exchanger holds under inspection.

A point worth internalizing: rust color is a poor predictor of integrity. Exchangers develop surface oxidation from normal condensation cycles, especially at the cold end of a non-condensing unit and on the secondary coil of a condensing unit where flue gas is intentionally cooled below its dew point. That rust can be cosmetic for years. Conversely, a crack often hides under a clean-looking section near a clamshell seam or a tube-to-header joint where thermal stress concentrates. So the inspection chases breach evidence, not discoloration.

Quick checks

1. Run the furnace through a full heat cycle and watch the burner flames as the blower energizes. Flame that pulls, flickers, distorts, or rolls out on blower start signals a breach or pressure path between combustion and air streams.
2. Take an ambient CO reading in the supply air downstream of the exchanger with a calibrated analyzer, and compare to a baseline reading away from the unit.
3. Visually inspect every accessible exchanger surface and seam with a mirror and inspection light; on condensing furnaces inspect the secondary coil for perforation and the collector box for cracks.
4. Check the cold end and clamshell joints, the most common crack locations, and the area around any restrictor or baffle where stress concentrates.
5. Verify the inducer and venting are correct first; a draft or combustion-air fault can disturb the flame and be mistaken for a breach.

Decision thresholds

CONDEMN AND SHUT DOWN (red-tag) when any one is true:

• A visible crack, hole, separated seam, or perforation in any combustion-side surface.
• Flame disturbance (pull, flicker, roll-out) on blower start that is not explained by a dirty burner, gas pressure, or draft fault.
• Combustion products detectable in the supply airstream (elevated CO downstream of the exchanger with no other source).
• A failed pressurization/visual integrity test confirming a breach.
• Heavy scaling or rust-through that has thinned or perforated the metal.

MONITOR when ALL hold:

• No crack, hole, separation, or perforation found on full inspection.
• Stable flame through the entire cycle including blower start.
• No combustion products in the supply air; ambient CO normal.
• Rust limited to surface film on intact metal with no measurable wall loss.

When in doubt, the safety default is shutdown until integrity is proven. Surface rust does not condemn; a breach does.

Confirming diagnosis

• The flame-disturbance test is the front-line field method but is not by itself proof of integrity. Pair it with direct visual inspection of all seams and a CO measurement in the airstream.
• Where access is limited, use a borescope through burner ports and the inducer to view interior surfaces.
• A controlled pressure/leak test of the exchanger (per manufacturer method) confirms a suspected breach when visual access is incomplete.
• Rule out alternative CO sources (cracked vent, blocked flue, dirty burners, improper gas pressure, blocked combustion air) before attributing supply-air CO to the exchanger. Elevated CO in the flue alone is a combustion problem; CO in the supply airstream specifically is what implicates the exchanger.
• Where the flame-disturbance test is ambiguous, repeat it after cleaning the burners and confirming gas pressure, so a dirty-burner flame anomaly is not mistaken for a crack.

Remediation

• Condemned exchanger: shut off gas, red-tag the unit, and do not return it to service. The exchanger or furnace must be replaced; a breached exchanger is not field-repairable.
• Notify the customer in writing and document CO readings, the breach location, and the shutdown.
• Monitor cases: clean accessible surfaces, correct any draft or combustion-air deficiency that promotes condensation and rust, and re-inspect at the next heating-season service.
• Verify proper venting and combustion air on every furnace, since condensation from poor draft is a primary driver of premature exchanger rust.

References

• NFPA 54 / ANSI Z223.1, National Fuel Gas Code (venting, combustion air, appliance condemnation).
• ANSI Z21.47 / CSA 2.3, Gas-Fired Central Furnaces (heat exchanger integrity).
• UL 727, Standard for Oil-Fired Central Furnaces (where applicable).
• ASHRAE Handbook, HVAC Systems and Equipment, furnaces chapter.
• ACCA Standard 4, Maintenance of Residential HVAC Systems (combustion and CO inspection criteria).