thanks but i hear that this config:
AuthUserFile /dev/null
AuthGroupFile /dev/null
RewriteEngine On
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} !^
http://.*yourdomain.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^
http://XX.XX.XX.XX/.*$ [NC]
RewriteRule .*[Jj][Pp][Gg]$|.*[Gg][Ii][Ff]$
http://www.yourdomain.com/ [R,L]
affect legal users using firewalls. Any other simple server config that doesnt block firewalls?