mechanism options

Dear all

i have the following setup on my DNS

afnet.net.              IN      TXT     "v=spf1 mx -all"
mmail.afnet.net.        IN      TXT     "v=spf1 a -all"
mail2.afnet.net.        IN      TXT     "v=spf1 a -all"

mmail.afnet.net is the HELO name of my server, can someone check this ?
mail2 is a second server we have not installed yet.

i'm wondering if i should keep the -all or use ~all for the first line

i can confirm that for now, i only have 1 server sending emails for my domain that is mmail.afnet.net

can you please advise ?

thanks

Bass