Citric Acid will clean it up, but won't stop further corrosion. (Repeatedly cleaning with Acid will eventually damage the boiler, but it will take years.)
The pro's protect out-of-service boilers by stopping Oxygen and Water from coming together. Either:
- Dry the boiler out completely and seal so air can't get in at all. A variant is get rid of the Oxygen in Air as well by filling the boiler with dry Nitrogen.
- Flush with clean water to remove muck, and then fill to the brim with freshly boiled water, again sealing so air can't get in. Boiling removes gases dissolved in the water, Carbon Dioxide and Oxygen are both corrosive. De-ionised or distilled water plus an inhibitor is best.
For home purposes, I guess careful drying and sealing is good enough. Fairly obvious leaving a boiler with water in it, and allowing air free access will cause oxygen rich condensation to do it's worst.
Dave