isn't it a bad idea to save the blocks to iptables, ddos attacks are usually temporary and after some time your going to have huge tables running and slowing things down.
Also you may be permanently banning a legit ip by mistake.

That's why i like ddosDeflate as it temporary bans IP's