If you removed the `--dport ssh` restriction on line 15, you could just get rid of these explicity rules for dropping packets destined for ports `80` and `8080`.