Best firewall rules for NullPing / Bots

Hello. Recently, there has been many bungeecord "exploits" based on ovetflowing it with null packets or http packets...

Could someone suggest me the best possible rules to block null pings & prevent or limit strength of bot attacks?

Thanks!