The other thing you could do is create a vlan for the machines that you want to block port 80 on, put those machines in that vlan then apply the access-list to the vlan.
Humans are not proud of their ancestors, and rarely invite them round to dinner.
Douglas Adams