diff --git a/config/filter.d/nginx-tls-fallback.conf b/config/filter.d/nginx-tls-fallback.conf
index aaa84fb9..b9eeac04 100644
--- a/config/filter.d/nginx-tls-fallback.conf
+++ b/config/filter.d/nginx-tls-fallback.conf
@@ -5,12 +5,10 @@
 [Definition]
 
 
-failregex = ^ \[crit\] \d+#\d+: \*\d+ SSL_do_handshake\(\) failed.*?ssl3_get_record.*?too.*?, client: <HOST>, server: \S+$
+failregex = ^\s*\[crit\] \d+#\d+: \*\d+ SSL_do_handshake\(\) failed \(SSL: error:\S+(?: \S+){1,3} too (?:long|short)\)[^,]*, client: <HOST>
 
 ignoreregex = 
 
 datepattern = {^LN-BEG}
 
 # Author: Stephan Orlowsky
-# maybe not restrictive enough, will also match:
-#"[crit] 76952#76952: *5062354 SSL_do_handshake() failed ssl3_get_record too, client: 0.0.0.0, server: thisshouldntmatch"