CPAN.pm should try passive-mode FTP (without the user having to set an environment variable) and should have at least one HTTP mirror address to try built in.

Modern computers are very often behind firewalls and defaulting to only trying non-passive FTP means that CPAN.pm just doesn't work for a large number of casual users.