Should I add an SPF record, which one?

Yes, you must add "v=spf1 include:includespf.security-mail.net -all" to your DNS server to avoid spoofing your mail servers.