Hi to all. Sorry for a OFFTOPIC but don't know where to ask this question. I need an RFC's guru help :-)
So, as I've found in RFC's all header fields in message should be encoded to 7-bit data. In addition my SMTP server does *not* support 8-bit MIME for incoming e-mail. The question is in subject - or am I missed some *legal* usage of 8-bit characters (maybe some kind of comments, optional fields, etc)? Of course, the goal is to write the rule for SA that will trigger on 8-bit symbols in raw ("raw"="what I've seen in tcpdump output for this message") message. Thanks in advance. Vitas.