Here's one that'd work for FTP (note, I'm assuming you have dynamic IPs, rather than statics). Setting them for other services is just as simple (just change ports, etc).
FIREWALL:
rule 10 {
action accept
description FTP
destination {
port 21
}
protocol tcp
state {
new enable
}
}DNAT - WAN_1
rule 10 {
description FTP
destination {
port 21
}
inbound-interface eth0
inside-address {
address 192.168.100.20
port 21
}
log disable
protocol tcp
type destination
}
DNAT WAN_2
rule 11 {
description FTP
destination {
port 21
}
inbound-interface eth1
inside-address {
address 192.168.100.20
port 21
}
log disable
protocol tcp
type destination
}
Then the next firewall rule (for whatever service) would be say rule 15, with NAT rules 15 and 16 (you don't have to do it this way -- it just helps me keep things straight).