Modify your Apache configuration (or whatever webserver you're using) to not Listen on every interface, but just 127.0.0.1. This will cause it to only allow HTTP and HTTPS from ...

I'm not entirely sure you can. The default web site properties won't let you deselect that port (it's not an option, IIRC). Try local port locking or on the firewall if you don't need it.