Modify your Apache configuration (or whatever webserver you're using) to not Listen on every interface, but just 127.0.0.1. This will cause it to only allow HTTP and HTTPS from ...