In the appvm that houses your thunderbird and protonmail bridge add protonmails IP(= 185.70.40.151) in the firewall settings. I have managed to get it working by further limiting it to port 443 only.
As I understand the workings of protonmail bridge and Qubes, since the bridge is in the same appvm as your thunderbird, 127.0.0.1 is all done within the appvm so it never crosses the firefall.
I am not sure of your setup but as I have used it as follows:
Thunderbird/protonmail bridge Appvm (firewall limited to 185.70.40.151) -> Firewall -> NetVM
or
Thunderbird/protonmail bridge Appvm (firewall limited to 185.70.40.151) -> Whonix-GW -> Firewall -> NetVM
I might submit a seperate question but how do you update the bridge in your current Appvm? Protonmail just updated bridge, in the past I have rebuilt my appvm but there must be an easier way to upgrade the bridge?
I hope that helps...