An interesting technote was posted that explains CFFTP errors when used in conjunction with sandbox security. It also does a nice simple job of explaining active versus passive mode connections. I recommend that anyone using CFFTP read it.
CFFTP Fails Using Sandbox Security