I thought I'd just stumble in here and mention that
leechblocker uses the http-referer header only, while
coldlink ignores http-referer in favour of expiring
cryptgraphic keys.
I think this one is better, especially if you have multiple virtual web sites. Supports individual configuration file for each web site.
Looks like a good replacement for good .htaccess from linux