Need some assistance, apparently I'm an idiot with acls anymore. We
have a vlan we need to allow basically only to the internet. A couple
internal servers (for anti-virus updates, dns reponses, etc) need to be
able to get to this vlan without the communication initiated from this
particular vlan, but nothing else.

I have this acl set up, and everything seems to work properly except a
machine on this vlan cannot get to any web page, internal or external,
but email & messenging software work fine. What am I missing?

192.168.10.98 and 10.5.10.98 are our dns servers
192.168.10.39 & 40 are a couple different a/v servers.

ip access-list extended blah_vlan_Out
permit udp host 192.168.10.98 any eq domain
permit udp host 10.5.10.98 any eq domain
permit tcp host 192.168.10.40 any eq 8192
permit tcp host 192.168.10.40 any eq 8193
permit tcp host 192.168.10.40 any eq 8194
permit tcp host 192.168.10.40 any eq 4460
permit tcp host 192.168.10.39 any eq 80
permit tcp host 192.168.10.39 any eq 443
permit tcp host 192.168.10.39 any eq 8081
permit tcp host 192.168.10.39 any eq 8082
permit tcp host 192.168.10.39 any eq 8443
permit tcp host 192.168.10.39 any eq 8444
permit tcp any any established
deny ip any any

--
Stevo