You can use every possible character except ":" and "/".
Some others can cause problems under special circumstances, such as command-line parsing, pattern-matching, or for use on pc filesystems.
If you really really really want to be safe, use only caps and 8.3