Huh...you've clearly got a solution in mind, and I'm getting a different result than I was earlier. I must have not tested it properly after making your suggested change (change the wan interface to pppoe0). With that in place, it *does* work from outside my network, both from my phone and from Tor. Connecting to my home wifi leads to the same connection refused message. So this sounds like something internal?
(pasting the current config for clarity, that works from external devices, but not internal)
port-forward { auto-firewall enable hairpin-nat enable lan-interface eth1 rule 1 { description HTTPS forward-to { address 192.168.1.6 } original-port 443 protocol tcp } wan-interface pppoe0 }