diff --git a/CHANGES b/CHANGES
index 9aa178cfa0..32b2719b92 100644
--- a/CHANGES
+++ b/CHANGES
@@ -252,6 +252,11 @@ IAX2 Changes
 * authdebug is now disabled by default. To enable this functionaility again
    set authdebug = yes in iax.conf.
 
+RTP Changes
+-----------
+ * The rtp.conf setting "strictrtp" is now enabled by default. In previous
+   releases it was disabled.
+
 ------------------------------------------------------------------------------
 --- Functionality changes from Asterisk 1.6.2 to Asterisk 1.8 ----------------
 ------------------------------------------------------------------------------
diff --git a/configs/rtp.conf.sample b/configs/rtp.conf.sample
index 224dc2abe2..6609530c1b 100644
--- a/configs/rtp.conf.sample
+++ b/configs/rtp.conf.sample
@@ -23,5 +23,5 @@ rtpend=20000
 ;
 ; Enable strict RTP protection. This will drop RTP packets that
 ; do not come from the source of the RTP stream. This option is
-; disabled by default.
+; enabled by default.
 ; strictrtp=yes
diff --git a/res/res_rtp_asterisk.c b/res/res_rtp_asterisk.c
index f4e8299bde..4621d2cc6e 100644
--- a/res/res_rtp_asterisk.c
+++ b/res/res_rtp_asterisk.c
@@ -2829,7 +2829,7 @@ static int rtp_reload(int reload)
 	rtpstart = DEFAULT_RTP_START;
 	rtpend = DEFAULT_RTP_END;
 	dtmftimeout = DEFAULT_DTMF_TIMEOUT;
-	strictrtp = STRICT_RTP_OPEN;
+	strictrtp = STRICT_RTP_CLOSED;
 	if (cfg) {
 		if ((s = ast_variable_retrieve(cfg, "general", "rtpstart"))) {
 			rtpstart = atoi(s);