which firewall best practices can help mitigate worms

Which firewall best practices can help mitigate worm and other automated attacks?