Building an ACL based Firewall for Cisco800 series

Hey guys, I am trying to put together an ACL based Firewall on my Cisco800 series router. When i apply it to dialer0 i cannot browse the web. I have entered lines for WWW (80) and DNS (50) but cannot browse the web. I can however ping. The acl is no "103" Please help!!!!

My second question is about port fowarding. I have set up nat with a routemap so it the router does not try and Nat vpn traffic - this works excellent. I do however wanna run a webserver and DNS on my private network, can you tell me if the other Nat line will work??

Current configuration : 5135 bytes
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname janet
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$Liry$A310/8k935Q/dOux/qDqo0
!
username mattac privilege 15 secret 5 $1$SSW6$vLfyk5XsdLrlLrEygY4qI/
username cisco password 7 0822455D0A16
clock timezone PCTime 0
clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00
aaa new-model
!
!
aaa authentication login userauthen local
aaa authorization network groupauthor local
aaa session-id common
ip subnet-zero
no ip source-route
ip dhcp excluded-address 172.22.0.101 172.22.255.254
ip dhcp excluded-address 172.22.0.1
!
ip dhcp pool sdm-pool1
   import all
   network 172.22.0.0 255.255.0.0
   default-router 172.22.0.1
!
!
ip cef
ip tcp synwait-time 10
no ip bootp server
no ip domain lookup
ip domain name yourdomain.com
ip ssh time-out 60
ip ssh authentication-retries 2
no ftp-server write-enable
!
!
!
!
!
crypto isakmp policy 3
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group 800client
 key cisco123
 dns 212.74.112.66
 domain cisco.com
 pool ippool
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 10
 set transform-set myset
!
!
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
!
!
!
interface ATM0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip route-cache flow
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 description $ES_WAN$$FW_OUTSIDE$
 pvc 0/38
  encapsulation aal5snap
  protocol ppp dialer
  dialer pool-member 1
 !
 crypto map clientmap
!
interface FastEthernet0
 no ip address
 no cdp enable
!
interface FastEthernet1
 no ip address
 no cdp enable
!
interface FastEthernet2
 no ip address
 no cdp enable
!
interface FastEthernet3
 no ip address
 no cdp enable
!
interface Vlan1
 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
 ip address 172.22.0.1 255.255.0.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
 ip tcp adjust-mss 1452
!
interface Dialer0
 ip address negotiated
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 ip route-cache flow
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname mattac@tiscali.co.uk
 ppp chap password 7 1048060B01111B0E1F102B
 crypto map clientmap
!
ip local pool ippool 192.168.224.50 192.168.224.100
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source static tcp 172.22.0.7 80 interface Dialer0 80
ip nat inside source route-map nonat interface Dialer0 overload
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 172.22.0.0 0.0.255.255
access-list 102 deny   ip 172.22.0.0 0.0.255.255 192.168.224.0 0.0.0.255
access-list 102 permit ip 172.22.0.0 0.0.255.255 any
access-list 102 remark NoNAT policy
access-list 103 remark IP ACL FIREWALL
access-list 103 permit tcp any any eq www
access-list 103 permit udp any any eq 80
access-list 103 permit tcp any any eq telnet
access-list 103 permit icmp any any administratively-prohibited
access-list 103 permit icmp any any echo
access-list 103 permit icmp any any echo-reply
access-list 103 permit icmp any any packet-too-big
access-list 103 permit icmp any any time-exceeded
access-list 103 permit icmp any any traceroute
access-list 103 permit icmp any any unreachable
access-list 103 permit udp any eq bootps any eq bootpc
access-list 103 permit udp any eq bootps any eq bootps
access-list 103 permit udp any eq domain any
access-list 103 permit esp any any
access-list 103 permit udp any any eq isakmp
access-list 103 permit udp any any eq 10000
access-list 103 permit tcp any any eq 1723
access-list 103 permit tcp any any eq 139
access-list 103 permit udp any any eq netbios-ns
access-list 103 permit udp any any eq netbios-dgm
access-list 103 permit gre any any
access-list 103 deny   ip any any
dialer-list 1 protocol ip permit
no cdp run
route-map nonat permit 10
 match ip address 102
!
!
control-plane
!
banner login ^CAuthorized access only!
 Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
 no modem enable
 transport preferred all
 transport output telnet
line aux 0
 transport preferred all
 transport output telnet
line vty 0 4
 privilege level 15
 transport preferred all
 transport input telnet ssh
 transport output all
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end