diff --git a/scripts/Makefile b/scripts/Makefile
index d2ab8f5d381..a6afb71ab2b 100644
--- a/scripts/Makefile
+++ b/scripts/Makefile
@@ -88,7 +88,6 @@ install:
 	mkdir -p $(DESTDIR)/etc/sysconfig
 	$(IPROG) sysconfig-xapi $(DESTDIR)/etc/sysconfig/xapi
 	$(IPROG) nbd-firewall-config.sh $(DESTDIR)$(LIBEXECDIR)
-	$(IPROG) fix_firewall.sh $(DESTDIR)$(OPTDIR)/bin
 	$(IPROG) update-ca-bundle.sh $(DESTDIR)$(OPTDIR)/bin
 	mkdir -p $(DESTDIR)$(OPTDIR)/debug
 	$(IPROG) debug_ha_query_liveset $(DESTDIR)$(OPTDIR)/debug
diff --git a/scripts/fix_firewall.sh b/scripts/fix_firewall.sh
deleted file mode 100644
index 7a486257883..00000000000
--- a/scripts/fix_firewall.sh
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/bin/bash
-#
-# Copyright (c) Citrix Systems 2008. All rights reserved.
-#
-
-set -e
-
-# Insert a firewall rule to allow traffic to pass through the guest-installer network
-
-CHAIN=xapi-INPUT
-IFACE=$1               # bridge name of guest installer network
-OP=$2                  # if == start, then start up the firewall, else stop it.
-
-# Flush any rules that are already there:
-iptables -F $CHAIN &> /dev/null || true
-iptables -D INPUT -j $CHAIN &> /dev/null || true
-iptables -X $CHAIN &> /dev/null || true
-
-# Insert the new rule - anything coming from the
-if [[ "${OP}" == "start" ]]; then
-    iptables -N $CHAIN
-    iptables -I INPUT 1 -j $CHAIN
-    iptables -A $CHAIN -i $IFACE -j ACCEPT
-fi