Cisco WAN :: 1841 Can't Access Network Resources

I'm working on setting up a couple of new WAN sites with 256K frame relay circuits back to our main building.  Each new site has a new PVC, and both are pointing back to a PVC on a T1 at the main building.  The main site has a 2801 with a single CSU/DSU WIC, and each new site has a 1841 with a 3560 connected to fa0/1.  At both sites, I'm able to get the circuit up, and the serial interfaces at both new sites show up/up, and the subinterfaces at the main site also show up/up for both sites.  Routing is being done by EIGRP, and both sites are able to establish the 2801 as an EIGRP neighbor, and I'm able to ping/tracert anywhere on our network by name or IP, so routing and DNS appear to be working.  I can also ping both new routers from the main site.  However, that's about all I can do.  I'm not able to access any resources on our network (email/shares/internet/intranet/etc) from the two new sites.  I can ping the new routers/switches from the main site, but can't ssh to them.  I can ssh to them locally.  There are no firewalls in the equation, and I don't think there are any ACL's in the picture either. 
 
Can ping and tracert just fine anywhere on our network (from both the 1841, a PC plugged into the 3560, or a PC plugged directly into the fa0/1 port on the 1841), including  out to the internet, by name or ip.Can ssh to local router, but not to anything that isn't localDNS is workingDHCP not working using  ip helper pointing to DHCP scope on server at main site, have to use static IPCan't rdp to anythingCan't get emailCan't browse windows  sharesCan't get to any websites, external or intranet.  IE says "Website found, waiting for reply..." but eventually times out.  
 
I did some testing for communication over certain port numbers using telnet and nmap, and found the following:
 
Can telnet to url.. and local intranet webserver on port  80 (http)Can telnet to two of our Exchange Servers on port 25 (SMTP)If I run an nmap scan on url...com, or our intranet webserver, it confirms that 80 and 443 are open, but the pages will not load.  I am able to telnet (port 23) to a state mainframe via the internet that some of our employees use, and I do get the expected login screen.  I tried erasing the config one of the new routers, and just added back the bare minimum config to get the circuits up (serial/ethernet interface configs, eigrp), but saw the same symptoms. 
 
One other thing to note: the 2801 at the main site has three other frame relay sites connected to it on the same WIC as the new sites, all of which are working fine. 
 
I just don't understand why I can ping everywhere I need to be able to ping, and port scans show that communication is open over needed ports, but the applications don't work.