I found this post on the forums
http://www.zenphoto.org/support/topic.php?id=1354&replies=1#post-7787
But it seems quite old and probably wont work with the current versions.

Does anyone have a way to do hotlink protection? Some of my other sites get bandwidth theft like you wouldn't believe.

Please try the nightly build, that has hotlink protection as an admin option.