for SSL you obviously need SSL Scanning to be enabled, as other wise the headers we are looking for will not be available as they are part of the encrpyted SSL portion.
For the upload rule, it will just be
Connection.Protocol equals HTTP OR HTTP and Command equals POST then block
It is notabled that in case you apply this rule - NO data can be posted to the web. Logins won't work, etc.