fix passive host checks