You might look at http://www.linuxvirtualserver.org/~julian/nano.txt - if your not using the patches referred to there it's still a good outline of a solution that should generalize to your setup. Just leave out "proto static" in the lines where it occurs and set 3 rather than 2 special tables. I have no trouble with either SSH or having FTP return over the interface it comes in on with that setup. Whit