If your host is using password sentry for protection, I would find a new host. Password sentry uses mod_rewrite to run through scripts. It is not a server module. It's a cheap way of providing protection. Since it uses mod_rewrite every time someone enters your members area, every single files and image has to run through that script. Can you image the server load on that?
With that being said it can't protect your site the way it should be protected.
Also, by using mod_rewrite you are limiting the amount of people that can enter your members area. Depending on the amount of members you have, I am sure you get an email every once in awhile saying they can't get into your members area. The answer for that is mod_rewrite.
The only real way to protect a site is to use a server installed module, not an installed script.
Keep in mind, you will still get password traded. There is no way around that. You can just limit the amount of people that get in.
I am curious, how do you know 100 people came in? What type of logs are you using that is telling you this.
As far as amount of gigs used. It's hard to tell. Member areas normally do not make up alot of bandwidth. You should be serving more bandwidth on your free tour.
We have our protection set to 5. If a password gets traded, no more than 5 people will come through. After 5 we send them to 403 pages which generates a good amount of traffic. I know the hosting company you are with takes all your error traffic which isn't right in my mind. Your losing out on alot of traffic that you could do something with.
Hope this helps a little.
Mike
