How can we help you?

If your store sits behind Cloudflare, Bot Fight Mode, managed WAF rules, or rate limiting can block Cart2Cart requests to the Connection Bridge folder (/bridge2cart). That often shows up as connection errors, HTTP 403/401, or a failed Bridge check during migration setup.

Create a Cloudflare custom WAF rule that skips those protections for the Bridge path only. Keep your other security rules in place for the rest of the site.

When you need this rule

Use this guide when:

• Cloudflare is proxying your store (orange-cloud DNS), and
• Cart2Cart cannot reach /bridge2cart/ (or Bridge upload/check fails), even though the Bridge files are on the server.

If Cloudflare is not enabled for the domain, this rule is not required. For IP-based allowlisting instead (or in addition), see How can I add Cart2Cart IPs to white list?.

Create the Cloudflare Skip rule

1. Log in to the Cloudflare dashboard and open the domain that fronts your store.

2. Go to Security → WAF → Custom rules → Create rule. (Some accounts show this under Security → Security rules → Create rule → Custom rules.)

3. Set the rule name to Allow Cart2Cart bridge2cart.

4. Open Edit expression (or the expression editor) and paste the expression from the section below.

5. Under Then take action, choose Skip. Enable skip for:

• Managed WAF
• Bot Fight Mode (or Super Bot Fight Mode, if shown)
• Rate limiting
• Remaining custom rules

6. Place this rule above other block/challenge custom rules so it is evaluated first.

7. Click Deploy.

Rule details to use

Name: Allow Cart2Cart bridge2cart

Expression:

(http.request.uri.path contains "/bridge2cart")

Action: Skip (managed WAF, bot fight, rate limiting, remaining custom rules)

Order: Above other block/challenge rules

After you deploy

1. Re-run the Connection Bridge check in the Cart2Cart Migration Wizard.

2. If the Bridge still fails, also whitelist Cart2Cart IPs (see the related article below) and confirm the Bridge folder permissions.

3. After migration is finished, you may disable or delete this rule if you no longer need Bridge access.

Need help? Contact Support or schedule a call with a migration expert.

Related articles

• How can I add Cart2Cart IPs to white list?
• How to deal with the IP blocking
• HTTP Error Code 403 Forbidden
• Connection Bridge not found
• What are the Connection Bridge files and how to download them?

Start your free demo.