diff --git a/config/filter.d/kerio.conf b/config/filter.d/kerio.conf
index f45d0940..b757386e 100644
--- a/config/filter.d/kerio.conf
+++ b/config/filter.d/kerio.conf
@@ -2,12 +2,13 @@
 
 [Definition]
 
-failregex = ^\[\] SMTP Spam attack detected from <HOST>,
-            ^\[\] IP address <HOST> found in DNS blacklist \S+( \S+), mail from \S+$
-            ^\[\] Relay attempt from IP address <HOST>
-            ^\[\] Attempt to deliver to unknown recipient \S+, from \S+, IP address <HOST>$
+failregex = ^ SMTP Spam attack detected from <HOST>,
+            ^ IP address <HOST> found in DNS blacklist \S+( \S+), mail from \S+$
+            ^ Relay attempt from IP address <HOST>
+            ^ Attempt to deliver to unknown recipient \S+, from \S+, IP address <HOST>$
+[Init]
 
-datepattern = %d/%b/%Y %H:%M:%S
+datepattern = ^[%%d/%%b/%%Y %%H:%%M:%%S]
 
 # DEV NOTES:
 #