@nichoilshen posted the solution in another thread.
Here are the firewall iptables needed for Tomato (where 192.168.1.2 is the IP address of your Pi/PiHole):
## Adding port forwarding for guest network post pi-hole
iptables -I FORWARD -i br1 -p tcp -d 192.168.1.2 -m multiport --dport 53,80,443 -j ACCEPT
iptables -I FORWARD -i br1 -p udp -d 192.168.1.2 -m multiport --dport 53,80,443 -j ACCEPT