best parctices can help mitigate worm and other authomated attack

Which firewall best practices can help mitigate worm and other automated attacks?