How to Change DNS Settings at OVHcloud: Set Up DMARC, SPF & DKIM

January 8, 2025 · DMARC Analyzer Pro

Detailed guide to configuring DMARC, SPF, and DKIM records at OVHcloud, a major European hosting provider popular in Belgium and the Netherlands.

Introduction

OVHcloud is one of Europe's largest cloud and hosting providers, with a strong presence in Belgium and the Netherlands. Founded in France, OVH has become the go-to choice for many European businesses seeking EU-based infrastructure with competitive pricing. If your domain is managed through OVHcloud, configuring email authentication records correctly is essential for protecting your organization against email-based threats.

This guide covers the complete process of adding SPF, DKIM, and DMARC records through the OVHcloud Manager. We will cover both the new and classic interfaces.

Before You Begin: Check Your Current DNS Status

Before making changes, run a quick scan of your domain using the free DNS Checker at https://dmarcanalyzer.pro/tools/dns-checker. This shows you which email authentication records already exist, helping you avoid duplicates or conflicts. Note down any existing SPF records -- you will need to modify them rather than replace them.

Step 1: Log In to OVHcloud Manager

Navigate to https://www.ovh.com/manager/ and log in with your OVHcloud customer ID (e.g., xx12345-ovh) and password. If you have two-factor authentication enabled, complete the verification step. After logging in, you will see the OVHcloud Manager dashboard.

Step 2: Navigate to Your Domain's DNS Zone

In the left sidebar, click "Domain names" under the "Web Cloud" section. Select your domain from the list. In the domain management page, click the "DNS zone" tab. This displays all DNS records currently configured for your domain in a detailed table view.

OVHcloud's DNS zone editor is powerful but can look complex. Look for the "Add an entry" button, usually located at the top right of the DNS zone table.

Step 3: Add Your SPF Record

OVHcloud provides a dedicated SPF record type in their DNS editor, but you can also use a standard TXT record. Click "Add an entry". You can either select "SPF" for the guided wizard or "TXT" for manual entry. We recommend the TXT approach for maximum control.

If using TXT: Set the subdomain field to empty (for root domain). Set the TTL to 3600 (or use the default). Enter your SPF value: v=spf1 include:mx.ovh.com ~all. If you use additional email providers, add them: v=spf1 include:mx.ovh.com include:_spf.google.com include:spf.protection.outlook.com ~all. Click "Confirm" to save.

OVHcloud note: If you use OVH's Pro Email or Exchange service, OVH may have automatically added an SPF record. Check for existing SPF records before adding a new one. You should have exactly one SPF record. Use https://dmarcanalyzer.pro/tools/spf-checker to validate.

Step 4: Add Your DKIM Record

For DKIM at OVHcloud: Click "Add an entry" and select "TXT" (or DKIM if available). In the subdomain field, enter your DKIM selector._domainkey (e.g., mail._domainkey for OVH email, or google._domainkey for Google Workspace). In the value field, paste the full DKIM public key record provided by your email service.

If you use OVHcloud's Exchange or Pro Email, DKIM is typically configured automatically. Navigate to the "Email" section in your OVH Manager to check if DKIM signing is already enabled. For third-party email services, follow their specific DKIM setup instructions to get the correct selector and key values.

Step 5: Add Your DMARC Record

Click "Add an entry" and select "TXT". In the subdomain field, enter _dmarc. In the value field, enter: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.be; ruf=mailto:dmarc-forensic@yourdomain.be; fo=1; adkim=r; aspf=r; pct=100. Click "Confirm" to save.

This configuration starts DMARC in reporting mode with both aggregate (rua) and forensic (ruf) reports. The fo=1 parameter requests forensic reports for any authentication failure, giving you maximum visibility. Generate your custom DMARC record at https://dmarcanalyzer.pro/tools/dmarc-builder.

Step 6: Wait for Propagation and Verify

OVHcloud DNS propagation typically takes 4 to 24 hours, though many changes take effect within 1 hour. OVH refreshes their DNS zone on regular intervals. After waiting, verify all three records at https://dmarcanalyzer.pro/tools/dns-checker. The tool will confirm each record is properly formatted and resolving correctly.

OVHcloud-Specific Tips

DNS zone editing mode: OVHcloud has both a simple and advanced (text) editing mode. The simple mode with the "Add an entry" button is easiest for adding individual records. The text mode lets you edit the entire zone file at once -- only use this if you are experienced with DNS zone file syntax.

OVH Exchange DKIM: If you are using OVHcloud's Hosted Exchange, you can enable DKIM directly in the Email section without manually adding DNS records. Go to Email > Your Exchange service > Associated domains > DKIM configuration.

API alternative: For advanced users, OVHcloud provides an API to manage DNS records programmatically. This can be useful for managing multiple domains.

Monitor Your Results with DMARC Analyzer Pro

After setting up your DNS records, DMARC Analyzer Pro (https://dmarcanalyzer.pro) becomes your command center for email security. The platform automatically receives and processes your DMARC reports, presenting them in clear, actionable dashboards. You will see exactly which servers are sending email on behalf of your domain, whether they pass SPF and DKIM checks, and what actions receiving servers take.

DMARC Analyzer Pro features include real-time report monitoring and alerting, AI-driven analysis that highlights risks and recommends actions, a step-by-step enforcement guide to reach p=reject safely, SPF flattening to manage complex multi-provider setups, and blacklist monitoring to catch reputation issues early. Get started with a free trial at https://dmarcanalyzer.pro/register.

Conclusion

OVHcloud provides comprehensive DNS management tools that make adding DMARC, SPF, and DKIM records straightforward. By following this guide, you have configured the three essential email authentication records for your domain. Remember that setting up these records is just the beginning -- continuous monitoring with DMARC Analyzer Pro (https://dmarcanalyzer.pro) is key to achieving and maintaining a fully protected email domain.