Routing not working with Cisco ASA 5510

I'm having problems with routing through my ASA 5510.

I can ping the gateway and beyond from the ASA - 172.31.50.1 & 172.31.3.252 but I can't ping from the internal network through the device, it doesn't seem to be letting any traffic through.

Here's the config:

pix# show running-config
: Saved
:
ASA Version 7.0(7)
!
hostname pix
domain-name waterfrontstudios.co.za
enable password fXEvDioRaOdx6xq3 encrypted
names
dns-guard
!
interface Ethernet0/0
 nameif Internet
 security-level 0
 ip address 172.31.50.10 255.255.255.0
!
interface Ethernet0/1
 nameif Trusted
 security-level 100
 ip address 192.168.21.1 255.255.0.0
!
interface Ethernet0/2
 description DMZ - Web, FTP, Mysql
 nameif DMZ
 security-level 50
 ip address 10.10.20.1 255.255.255.0
!
interface Ethernet0/3
 description Clients - Client Network
 shutdown
 nameif Clients
 security-level 3
 ip address 10.10.30.1 255.255.255.0
!
interface Management0/0
 nameif management
 security-level 100
 ip address 10.10.10.1 255.255.255.0
 management-only
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
object-group service Farmers-Wife tcp
 description Farmers-Wife External Access
 port-object eq www
 port-object range 22000 22000
 port-object range 3389 3389
 port-object eq echo
object-group service Zimbra tcp
 description Email Servers
 port-object eq echo
 port-object eq www
 port-object range 7071 7071
 port-object eq ssh
 port-object eq pop3
 port-object eq https
 port-object eq smtp
 port-object eq imap4
object-group service webservices tcp
 description Preview,FTP,Webe
 port-object eq echo
 port-object eq www
 port-object eq ctiqbe
 port-object eq ssh
 port-object range 3389 3389
 port-object eq ftp
 port-object range 3306 3306
access-list Internet_access_in extended permit tcp any host 172.31.50.8 object-group Zimbra
access-list Internet_access_in extended permit tcp any host 172.31.50.6 object-group Zimbra
access-list Internet_access_in extended permit tcp any host 172.31.50.14 object-group webservices
access-list Internet_access_in extended permit tcp any host 172.31.50.7 object-group webservices
access-list Internet_access_in extended permit tcp any host 172.31.50.76 object-group webservices
access-list Internet_access_in extended permit tcp any host 172.31.50.77 object-group webservices
access-list Internet_access_in extended permit tcp any host 172.31.50.5 object-group Farmers-Wife
access-list Internet_access_in extended permit tcp any host 172.31.50.70 object-group webservices
access-list Internet_access_in extended permit tcp any host 172.31.50.13 object-group webservices
access-list Internet_access_in remark Waterfront Proxy Redirect
access-list Internet_access_in extended permit tcp any eq www host 172.31.50.81 eq 8080
access-list Internet_access_in extended permit icmp any any
access-list Trusted_nat0_outbound extended permit ip any 192.168.0.0 255.255.255.224
access-list DMZ_nat0_outbound extended permit ip any 192.168.0.0 255.255.255.224
pager lines 24
logging asdm informational
mtu Internet 1500
mtu Trusted 1500
mtu DMZ 1500
mtu Clients 1500
mtu management 1500
ip local pool VPN 192.168.0.10-192.168.0.20 mask 255.255.0.0
no failover
icmp permit any Internet
icmp permit any Trusted
asdm image disk0:/asdm-507.bin
no asdm history enable
arp timeout 14400
global (Internet) 2 172.31.50.100-172.31.50.239 netmask 255.255.255.0
global (DMZ) 1 10.10.20.50-10.10.20.100
nat (Trusted) 0 access-list Trusted_nat0_outbound
nat (Trusted) 0 0.0.0.0 0.0.0.0
nat (DMZ) 0 access-list DMZ_nat0_outbound
nat (management) 0 0.0.0.0 0.0.0.0
static (DMZ,Internet) 172.31.50.8 10.10.20.2 netmask 255.255.255.255
static (DMZ,Internet) 172.31.50.6 10.10.20.3 netmask 255.255.255.255
static (DMZ,Internet) 172.31.50.14 10.10.20.4 netmask 255.255.255.255
static (DMZ,Internet) 172.31.50.7 10.10.20.5 netmask 255.255.255.255
static (DMZ,Internet) 172.31.50.76 10.10.20.6 netmask 255.255.255.255
static (DMZ,Internet) 172.31.50.77 10.10.20.7 netmask 255.255.255.255
static (Trusted,Internet) 172.31.50.5 192.168.0.53 netmask 255.255.255.255
static (Trusted,Internet) 172.31.50.70 192.168.0.54 netmask 255.255.255.255
static (Trusted,Internet) 172.31.50.13 192.168.21.151 netmask 255.255.255.255
static (Trusted,Internet) 172.31.50.81 192.168.0.60 netmask 255.255.255.255
access-group Internet_access_in in interface Internet
route Internet 0.0.0.0 0.0.0.0 172.31.50.1 1
route Trusted 192.0.0.0 255.255.0.0 192.168.21.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
group-policy CiscoASA internal
group-policy CiscoASA attributes
 wins-server value 192.168.0.51 192.168.0.52
 dns-server value 192.168.0.51 192.168.0.52
 default-domain value waterfrontvpn.co.za
 webvpn
username admin password nfxQSC/KrSi6UL15 encrypted privilege 15
username waterfront password iomyORe9E.7C9YY2 encrypted privilege 0
username waterfront attributes
 vpn-group-policy CiscoASA
 webvpn
aaa authentication telnet console LOCAL
http server enable
http 192.168.21.0 255.255.255.0 Trusted
http 192.168.0.0 255.255.255.255 Trusted
http 10.10.10.0 255.255.255.0 management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map Internet_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map Internet_map 65535 ipsec-isakmp dynamic Internet_dyn_map
crypto map Internet_map interface Internet
isakmp enable Internet
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
tunnel-group CiscoASA type ipsec-ra
tunnel-group CiscoASA general-attributes
 address-pool VPN
 default-group-policy CiscoASA
tunnel-group CiscoASA ipsec-attributes
 pre-shared-key *
telnet 192.168.0.0 255.255.0.0 Trusted
telnet timeout 5
ssh timeout 5
console timeout 0
management-access Trusted
dhcpd address 10.10.10.2-10.10.10.10 management
dhcpd lease 3600
dhcpd ping_timeout 50
dhcpd enable management
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map global_policy
 class inspection_default
  inspect dns maximum-length 512
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
!
service-policy global_policy global
smtp-server 192.168.21.8
Cryptochecksum:9f90e62bd17f1f8763398562958d460b
: end


Anyone have any ideas?