I want to drop *anything* other than to port 80.

Can't you set up a default rule of drop, and then allow port 80?