PPOE Connection to Router 1 ( gateway Router ) –- Lan Interface on Router 1 is 10.0.0.1/24 This interface is RIP enabled.

Router 2 is set up as a true router with various IP filtering rules. Interface (1) on router 2 is 10.0.0.2/24 and is plugged into same switch as 10.0.0.1
Router 2 also has an interface (2) 10.0.1.1/24 and (3) 10.0.2.1/24. All of these interfaces are RIP enabled as well and physically separate NICS

Router 3 is set up as a true router with various IP filtering rules as well. Nearly identical set up to Router 2 excepting the IP scheme differs:
Interface (1) on Router 3 is 10.0.0.3/24 -RIP Enabled- and is plugged into same switch as 10.0.0.1/24 as well
Interface (2) on Router 3 is 10.0.3.1/24 - RIP Endabled-

Ok all my "internal" traffic works perfectly including rulesets I wrote to allow all RIP traffic to pass..

I can reach any destination I want to from any area of the network. I can web into 10.0.0.1 from any side of the network.

I cannot get out to the web. I don't know why. Looking at my States is confusing. DNS works. Again, every bit of my traffic passes or is blocked the way it's supposed to internally on the network.

But a client for instance 10.0.1.9/24 can ping 10.0.0.1, tracert (traceroute) 10.0.0.1, web into the gateway router. but I can't get out to the web.

I'm confused. I've tried setting up my gateways on my interfaces in different configs, the web just won't work. I turned on (AON) on Router 2 and 3 because I did not want them to NAT. This shouldn't be an issue I don't think...unless... the automatically created ruleset that pops up is a showstopper? Not sure there.

I'm stuck.. any help would be appreciated.