Shutting off ports on one interface only

Is there a way to do this? Like say I want to allow ftp services to one interface but not on the other. Do I need to install TCP_Wrappers or something or can this be setup out of the box?

Thanks
Mark