If anyone can tell me how to embed this particular DNS query into a firewall appliance ACL, please let me know. I have customers with Watchguard and Cisco gear who have intermittent trouble with Google's mail relay (formerly Postini). The solution is always to perform that record lookup and add the new IP address blocs.
I've heard of several cases where people were fired for poor performance and then turned around and filed baseless, retaliatiory discrimination lawsuits. Obviously that's anecdata, but I believe that's the type of thing the poster is referring to.