User-agent: *
Disallow: /
# if you've got it, this is a good idea
Disallow: /admin/ # no reason for them to try there