Cisco Firewall :: 2811 Running Advance Enterprise V 15.1-2

I have a Cisco 2811 running Advance Enterprise v 15.1-2.  I've just configured it using ccp for internet access (on 2 lines) and a firewall.  The configuration is pretty much all default and I used the ccp wizard to create a 'medium-secure' firewall. I have 2 blocks of public IP addresses for my internal network and for the DMZ.  The 2800 is configured as follows:
 
- 2 x default routes. one to each dialer.

- 6 zone pairs as follows:
  - ccp-zp-self-out (seems to mostly work... I can ping any IP address from a console but not a hostname)
  - ccp-zp-in-out (works fine, both interfaces seem to be in use)
  - ccp-zp-in-dmz
    - which by default set to ccp-permit-dmzservice
    - which inspects ccp-dmz-traffic
    - which matches group dmz_traffic and has a class map dmz-traffic

- cnc-zp-dmz-out which is set to ccp-inspect. (my own zone pair to allow systems in the DMZ zone to see the internet.  This works fine.)

- ccp-zp-out-dmz (works fine.  I can see my web server from any system outside my own network)

 - ccp-zp-out-self (which, I guess allows anything permitted to get to the 2811)
 
Internet works from within the DMZ and in-zone.  The outside can access my dmz servers.  The inside can access most things on the outside using the firewall rules.
 
1) Although I have the zones set up to allow the same access from in->dmz as I do from out->dmz and out->dmz seems to work, I cannot seem to access anything in the dmz from the inside.
 
2) When setting up the firewall I ticked the box for 'allow PPTP clients to make connections from the inside' (or something like that).  I cannot seem to make a PPTP connection from my workstation.
 
I have scoured the internet for guides, looked through these forums & the cisco configuration guides and experimented all day but still cannot figure this out.Do I need a special route between the inside and dmz?  I have seem references to static routes on ASA firewalls but the command 'static (inside,dmz)...' does not work on a 2800 series router.