diff --git a/config/filter.d/openwebmail.conf b/config/filter.d/openwebmail.conf
index 00cdc87e..ef51031f 100644
--- a/config/filter.d/openwebmail.conf
+++ b/config/filter.d/openwebmail.conf
@@ -5,8 +5,8 @@
 
 [Definition]
 
-failregex = ^ - \[\d+\] \(<HOST>\) .* login error .+$
-            ^ - \[\d+\] \(<HOST>\) .* doesn't exist$
+failregex = ^ - \[\d+\] \(<HOST>\) (?P<USER>\S+) - login error - (no such user - loginname=(?P=USER)|auth_unix.pl, ret -4, Password incorrect)$
+            ^ - \[\d+\] \(<HOST>\) (?P<USER>\S+) - userinfo error - auth_unix.pl, ret -4, User (?P=USER) doesn't exist$
 
 ignoreregex =