support passive host checking