For some reason on I feel silly using the word "zener" in two posts on the same day...
I am sure there is a yet better way to protect the Arduino, but a 5 volt zener with the anode (unstriped positive end) to ground is probably the minimum. Any thing over 5 volts gets shunted to ground.
zener zener zener 