Anyone see this: http://www.modsecurity.org/projects/modsecurity/iis/index.html
Does it do what it should?