Unfortunately both are well known problems of ZS. For the cookie sites you are advised to apply a static route in order to send traffic over one connection only.
For the incoming connections I have created a balancing rule in Netbalancer so that SSH connections go through ppp0 and VNC through ppp1.
We all hope those problems will be soon repaired.