Filter1
"Not HTTP query strings contains Cloya"
Filter2
"Not HTTP query strings contains Bofio"
Actually need to be careful about combining logic like this.
WinGate uses logic of filter1 OR filter2.
In this case, either "not query string contains Cloya" or "not querystring contains Bofio".
this will let anything through except if the query string contains both Cloya and Bofio (unlikely), so it will let everything through.
from boolean logic, NOT A OR NOT B = NOT (A AND B)
If you combine criteria in the same filter, then you would have
Filter1
"Not HTTP query strings contains Cloya"
"Not HTTP query strings contains Bofio"
which logically then is "Not HTTP query strings contains Cloya" AND "Not HTTP query strings contains Bofio" - e.g. neither contains Cloya nor Bofio, which is what you want.
Actually putting both of these in the banlist will have the same effect, so putting them in the Advanced tab is probably unnecessary in this case.
Regards
Adrien