Anyone knows how to create a blocking request rule in IIS that do not meet the following requirements?